nuget MessagePack.Unity vulnerabilities

Latest nuget MessagePack.Unity CVEs

Newest publication first

1. CVE-2020-5234 Untrusted data can lead to DoS attack in MessagePack for C# and Unity

   Published 2020-01-31

   Medium·CVSS 6.5 EPSS 1.6%

   MessagePack for C# and Unity before version 1.9.11 and 2.1.90 has a vulnerability where untrusted data can lead to DoS attack due to hash collisions and stack overflow. Review the linked GitHub Security Advisory for more information and remediation steps.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.