PatchTheCVEmessagepack vulnerabilities
Recent CVEs affecting messagepack products. 12 tracked.
messagepack has 12 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 12. Most recent: 2026-06-22. Highest priority: CVE-2026-48509 (score 46/100).
- CVE-2026-48517 HIGH 7.5 UPGRADE MessagePack for C# is a MessagePack serializer for C#
- CVE-2026-48516 HIGH 7.5 UPGRADE MessagePack for C# is a MessagePack serializer for C#
- CVE-2026-48515 HIGH 7.5 UPGRADE MessagePack for C# is a MessagePack serializer for C#
- CVE-2026-48514 HIGH 7.5 UPGRADE MessagePack for C# is a MessagePack serializer for C#
- CVE-2026-48513 HIGH 7.5 UPGRADE MessagePack for C# is a MessagePack serializer for C#
- CVE-2026-48512 HIGH 7.5 UPGRADE MessagePack for C# is a MessagePack serializer for C#
- CVE-2026-48511 HIGH 7.5 UPGRADE MessagePack for C# is a MessagePack serializer for C#
- CVE-2026-48510 HIGH 7.5 UPGRADE MessagePack for C# is a MessagePack serializer for C#
- CVE-2026-48509 CRITICAL 9.1 UPGRADE MessagePack for C# is a MessagePack serializer for C#
- CVE-2026-48109 HIGH 8.2 UPGRADE MessagePack for C# is a MessagePack serializer for C#
- CVE-2026-48502 HIGH 7.5 UPGRADE MessagePack for C# is a MessagePack serializer for C#
- CVE-2026-48506 HIGH 7.5 UPGRADE MessagePack for C# is a MessagePack serializer for C#
FAQ
How do I fix messagepack vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is messagepack being exploited right now?
None of the tracked messagepack CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which messagepack CVE should I patch first?
CVE-2026-48509 currently ranks highest (46/100): MessagePack for C# is a MessagePack serializer for C#.