nuget package report

Is MessagePack.UnityShims safe?

1 known vulnerability, worst severity MODERATE.

cvss

4.8

how bad it is if exploited, out of 10

epss

1.6%

chance of exploitation in the next 30 days

xyz score

not scored

CyberXYZ composite, out of 10

fig. 01 — GHSA-7q36-4xx7-xcxf, the advisory selected below

// advisories

GHSA-7q36-4xx7-xcxf

MODERATECVE-2020-5234

When this library is used to deserialize messagepack data from an untrusted source, there is a risk of a denial of service attack by either of two vectors:

Affected: >= 2.0.0, < 2.1.90, < 1.9.11
Fixed in: 2.1.90
Weakness: CWE-121
Published: 2020-01-31
Source: github

GHSA NVD MITRE reference reference reference reference reference reference

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so nuget packages are not covered.

Checked 2026-09-22 at 01:35 UTC. The most recent advisory here was published 2020-01-31. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is MessagePack.UnityShims safe? nuget package security report | CyberXYZ