cve.nowby Sazabi

GoPackage

github.com/shamaton/msgpack/v3

1 known vulnerability (1 high), with the versions each affects and the releases that fix them.

Latest release: v3.2.7 (Nov 8, 2026): no advisory affects it
Newest unaffected release: v3.2.7 (Nov 8, 2026), the latest release
Advisories: 1 · 1 high

Releases: 12 since v3.0.0 (Jan 15, 2026)
Registry: pkg.go.dev
Releases read: Nov 8, 2026

Version timeline

CVE-2026-32284
Affects v3.0.0 to v3.1.0 (v3.1.1 is outside it)

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

CVE-2026-32284High 7.5
Denial of service in github.com/shamaton/msgpack
Affected: through 3.1.0; fixed in 3.1.1.
Fixed in v3.1.1 (released May 12, 2026, 47 days after disclosure).
The latest release, v3.2.7, is not affected.