← Packages
python-msgpack
Python MessagePack (de)serializer
- Current
- 1.2.1
- Candidate
- 1.2.4Stale
- License
- Apache-2.0
RuntimeDeps
Advisory · 1
Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.
- Summary
- MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failureOSV
- Fixed events
- 1.2.3OSV
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.543%FIRST
- Returned advisory
- GHSA-j586-36cw-2gc2OSV
- Aliases
- GHSA-j586-36cw-2gc2OSV
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HOSV
Description
MessagePack is a binary-based efficient data interchange format that is focused on high performance. It is like JSON, but very fast and small. This is a Python (de)serializer for MessagePack.
Changelog
PR · 6
Checks
| Monitor | Observation | Last checked |
|---|---|---|
Stale Repository refresh: git fetch exited 128 (authentication) | ||
Stale Source last confirmed at 2026-11-10T09:54:44+00:00; repository refresh overdue. | ||
Checked | ||
Checked | ||
Not configured No reliable monitor identity/configuration. | — | |
Checked Compared same-provider, same-project SPDX metadata for this version pair. | Last attempted | |
Checked | Last attempted | |
Checked Current source component only; local patches, build options, bundled dependencies and binary artifacts are not evaluated. | Last attempted | |
Checked |