2 known security vulnerabilities

  • highGHSA-73v3-wf97-vpgj(CVE-2026-126366)

    msgpack-ruby JRuby decoder makes uncapped header-count allocations; a 5-byte message forces multi-GiB OOM

Show 1 more vulnerability
1 low
  • lowGHSA-4mrv-5p47-p938(CVE-2026-54522)

    MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure

MessagePack is a binary-based efficient object serialization library. It enables to exchange structured objects between many languages like JSON. But unlike JSON, it is very fast and small.

Required Ruby Version

>= 0

Authors

Sadayuki Furuhashi, Theo Hultberg, Satoshi Tagomori

Versions

  1. 1.8.7

    1. source

      1. 1.8.7 source October 30, 2026 (61.5 KB)

    2. java

      1. 1.8.7 multi-abi October 30, 2026 (45 KB)
  2. 1.8.6

    1. source

      1. 1.8.6 source October 27, 2026 (61.5 KB)

    2. java

      1. 1.8.6 multi-abi October 27, 2026 (45 KB)
  3. 1.8.5

    1. source

      1. 1.8.5 source September 11, 2026 (61.5 KB)

    2. java

      1. 1.8.5 multi-abi September 11, 2026 (45 KB)
  4. 1.8.4

    1. source

      1. 1.8.4 source July 28, 2026 (61 KB)

    2. java

      1. 1.8.4 multi-abi July 28, 2026 (45 KB)
  5. 1.8.3

    1. source

      1. 1.8.3 source June 10, 2026 (61.5 KB)

    2. java

      1. 1.8.3 multi-abi June 10, 2026 (45 KB)
  6. 1.4.0

    1. java

      1. 1.4.0 multi-abi January 27, 2021 (56.5 KB)
Show all versions (272 total)

Pushed by

tagomoris

SHA 256 checksum

← Previous version Next version →