github.com/shamaton/msgpack/v3
easier, faster, but extendable MessagePack Serializer for Golang. / msgpack.org[Go]
View on Github
Activity
- Latest release
- 3d ago
- Total releases
- 11
- Cadence
- ~14 days
- Last 12 months
- 11
Reach
- Stars
- 188
Details
- First release
- Jan 15, 2026
| Version | Released | |
|---|---|---|
v3.2.6
patch
|
v3.2.6
patch
|
|
v3.2.5
patch
|
v3.2.5
patch
|
|
v3.2.4
patch
|
v3.2.4
patch
|
|
v3.2.3
patch
|
v3.2.3
patch
|
|
v3.2.2
patch
|
v3.2.2
patch
|
|
v3.2.1
patch
|
v3.2.1
patch
|
|
v3.2.0
minor
|
v3.2.0
minor
|
|
v3.1.2
patch
|
v3.1.2
patch
|
|
v3.1.1
patch
|
v3.1.1
patch
|
|
v3.1.0
minor
1 CVE
CVE-2026-32284
GHSA-h9q6-hc68-35rp
GO-2026-4513
Mar 18, 2026
Denial of service in github.com/shamaton/msgpack
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
The msgpack decoder fails to properly validate the input buffer length when processing truncated fixext data (format codes 0xd4-0xd8). This can lead to an out-of-bounds read and a runtime panic, allowing a denial of service attack. References Updated Oct 07, 2026 · Source: OSV.dev |
v3.1.0
minor
|
|
v3.0.0
initial
1 CVE
CVE-2026-32284
GHSA-h9q6-hc68-35rp
GO-2026-4513
Mar 18, 2026
Denial of service in github.com/shamaton/msgpack
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
The msgpack decoder fails to properly validate the input buffer length when processing truncated fixext data (format codes 0xd4-0xd8). This can lead to an out-of-bounds read and a runtime panic, allowing a denial of service attack. References Updated Oct 07, 2026 · Source: OSV.dev |
v3.0.0
initial
|