Skip to content

CVE record · 1 source

CVE-2026-107302

CVSS 7.5

msgpack5 is a msgpack v5 implementation for node.js and the browser.

Vendor: Node.js
Product: Node.js
CVSS: 7.5
EPSS: 0.005 (p44)
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

20

CVE NVD 23d ago

msgpack5 is a msgpack v5 implementation for node.js and the browser.

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the decoder reads the four-byte length of a map32 value before validating that the complete five-byte header is available. A truncated map32…

CVSS 7.5 Fix available CVE-2026-107302 Node.js