CVE-2026-48506 | MessagePack-CSharp MessagePack for C# up to 2.5.300/3.1.6 MessagePackReader.TrySkip recursion (GHSA-vh6j-jc39-fggf)

June 23, 2026 Yanac

A vulnerability was found in MessagePack-CSharp MessagePack for C# up to 2.5.300/3.1.6. It has been classified as problematic. Impacted is the function MessagePackReader.TrySkip. The manipulation leads to uncontrolled recursion.

This vulnerability is traded as CVE-2026-48506. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More