Описание
Deserialization of Untrusted Data in msgpack
Withdrawn
This advisory was withdrawn by its CNA (Snyk).
Original advisory
All versions of package msgpack are vulnerable to Deserialization of Untrusted Data via the unpack function. This does not affect the similarly named package @msgpack/msgpack.
Пакеты
Наименование
msgpack
npm
Затронутые версииВерсия исправления
<= 1.0.3
Отсутствует
Связанные уязвимости
nvd
больше 4 лет назад
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none