CVE-2026-57585

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.1, there is an Out-of-bounds read/crash on Unpacker reuse after a caught error, potentially leading to a DoS attack. If the Unpacker is used repeatedly after an error occurs, the process may crash with a SEGV. This issue has been fixed in version 1.2.1.

• CWE-416

• https://github.com/msgpack/msgpack-python/commit/2c56ddb5d0025ed481d962c0f5d62d19dec7476dPatch
• https://github.com/msgpack/msgpack-python/security/advisories/GHSA-6v7p-g79w-8964Mitigation, Vendor Advisory

Published

Jun 30, 2026

Last Modified

Aug 6, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-57572Crawl4AI is an open-source LLM-friendly web crawler and scra…10
• CVE-2026-57573Crawl4AI is an open-source LLM-friendly web crawler and scra…8.6
• CVE-2026-57574Misskey is an open source, federated social media platform. …7.4
• CVE-2026-57575Misskey is an open source, federated social media platform. …6.9
• CVE-2026-5758JavaScript is vulnerable to prototype pollution in Mafintosh…6.5
• CVE-2026-57584Phalcon is a high-performance, full-stack PHP framework. Pri…8.7
• CVE-2026-57587A SQL injection vulnerability in Nessus allows a remote, una…5.3
• CVE-2026-57588A SQL injection vulnerability in Nessus allows an attacker t…3.3
• CVE-2026-57589sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-f…7.8
• CVE-2026-57599There is a privilege escalation vulnerability in some Hikvis…6.6
• CVE-2026-5760SGLang's reranking endpoint (/v1/rerank) achieves Remote Cod…9.8
• CVE-2026-57600Insufficient validation of input parameters in the firmware …7.5