Question 1

What is CVE-2026-106972 — CVE-2026-106972?

Accepted Answer

An uncontrolled recursion in the MessagePack\BufferUnpacker::unpack() component of rybakit/msgpack v0.11.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.

Question 2

What is the authoritative source for CVE-2026-106972?

Accepted Answer

CVE-2026-106972 (CVE-2026-106972) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-106972CVE-2026-106972

Description

Scoring