Extremely Fast MessagePack(MsgPack) Serializer for C# (.NET Framework, .NET 6, Unity, Xamarin).
96%
Total Score
100
74
100
100
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-644423 New MessagePack is vulnerable to Integer Overflow in versions 0.0.1 - 2.5.306 and 3.0.0 - 3.1.10. | 0.0.1 - 2.5.3063.0.0 - 3.1.10 | High |
AIKIDO-2026-487768 MessagePack is vulnerable to Regular Expression Denial of Service (ReDoS) in versions 2.1.115 - 2.5.303 and 3.0 - 3.1.9. | 2.1.115 - 2.5.3033.0 - 3.1.9 | Medium |
AIKIDO-2026-858049 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. MessagePack is vulnerable to Deserialization of Untrusted Data in versions 1.4.0 - 2.5.198 and 3.0.3 - 3.1.4. | 1.4.0 - 2.5.1983.0.3 - 3.1.4 | Medium |
AIKIDO-2026-233096 MessagePack is vulnerable to Denial of Service (DoS) in versions 0.0.1 - 2.5.302 and 3.0.0 - 3.1.8. | 0.0.1 - 2.5.3023.0.0 - 3.1.8 | Medium |
CVE-2026-48514 MessagePack is vulnerable to Allocation of Resources Without Limits or Throttling in versions 0.0.0 - 2.5.301 and 3.0 - 3.1.7. | 0.0.0 - 2.5.3013.0 - 3.1.7 | Medium |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
messagepackanalyzer Version [3.1.11, ) | — | — |
messagepack.annotations Version [3.1.11, ) | — | — |
microsoft.bcl.asyncinterfaces Version [8.0.0, ) | — | — |
microsoft.net.stringtools Version [17.11.4, ) | — | — |
system.collections.immutable Version [8.0.0, ) | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.