HIGH7.5NuGet
GHSA-2cwq-pwfr-wcw3· CVE-2026-44375Nerdbank.MessagePack: Attacker-controlled stackalloc in DateTime decoding causes process-terminating StackOverflowException
Modified: 5/14/2026
package
NuGet/Nerdbank.MessagePack
pkg:nuget/Nerdbank.MessagePack
MEDIUM5.3NuGet
GHSA-92vj-hp7m-gwcjNerdbank.MessagePack has Inefficient CPU Computation
Modified: 5/29/2026
MEDIUM5.3NuGet
GHSA-qjvr-435c-5fjhNerdbank.MessagePack has a memory amplification DoS in collection deserialization
Modified: 5/29/2026