Nerdbank.MessagePack
dotnet · Nerdbank.MessagePackHeads-up
Nerdbank.MessagePack deserializers vulnerable to memory amplification via collection preallocation
Nerdbank.MessagePack deserializers for collection-shaped types allocate storage based on attacker-controlled element counts from M
09 Jun 2026 · schedule it
dotnet · Nerdbank.MessagePackHeads-up
Nerdbank.MessagePack: Denial of Service via ExpandoObject Converter
A security advisory was published for Nerdbank.
09 Jun 2026 · schedule it