UNKNOWN NVD
CVE-2026-106972
An uncontrolled recursion in the MessagePack\BufferUnpacker::unpack() component of rybakit/msgpack v0.11.0 allows attackers to cause a Denial of Service (DoS) v
An uncontrolled recursion in the MessagePack\BufferUnpacker::unpack() component of rybakit/msgpack v0.11.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
References
- https://github.com/diptendukar/security-advisories/blob/main/CVE-2026-106972.md
- https://github.com/rybakit/msgpack.php
- https://github.com/rybakit/msgpack.php/releases/tag/v0.11.0
This unknown severity vulnerability was published on 2026-10-28 via NVD.
vulnfeed aggregates 14990 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.