cve.nowby Sazabi

GoPackage

github.com/shamaton/msgpack

1 known vulnerability (1 high), with the versions each affects and the releases that fix them.

Latest release: v1.2.1 (Feb 9, 2021): affected by CVE-2026-32284
Newest unaffected release: Every release is affected by at least one advisory
Advisories: 1 · 1 high

Releases: 8 since v0.9.0 (Sep 5, 2018)
Registry: pkg.go.dev
Releases read: Nov 8, 2026

Version timeline

CVE-2026-32284
Affects v0.9.0 to v1.2.1 (through the newest release)

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

CVE-2026-32284High 7.5
Denial of service in github.com/shamaton/msgpack
Affected: all versions.
No fix released. The latest release, v1.2.1, is still affected.