CVE-2026-106972

Published: Oct 28, 2026Modified: Oct 28, 2026Deferred

Description

An uncontrolled recursion in the MessagePack\BufferUnpacker::unpack() component of rybakit/msgpack v0.11.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.

References (3)

https://github.com/diptendukar/security-advisories/blob/main/CVE-2026-106972.md

Source: cve@mitre.org

https://github.com/rybakit/msgpack.php

Source: cve@mitre.org

https://github.com/rybakit/msgpack.php/releases/tag/v0.11.0

Source: cve@mitre.org

Timeline

No history available yet.