Skip to content
Threat Feed
Subscribe

Vendor

NuGet

2 briefs RSS
medium advisory

Snappier SnappyStream Decompression Infinite Loop Vulnerability

Snappier versions 1.3.0 and earlier are vulnerable to a denial-of-service condition where a malformed Snappy stream input to `SnappyStream` decompression causes an infinite loop, consuming a thread until the process is terminated.

Snappier denial-of-service compression infinite-loop
2r 1t
high advisory

Nerdbank.MessagePack DateTime Decoding Stack Overflow Vulnerability

A malicious MessagePack payload can trigger a StackOverflowException in Nerdbank.MessagePack due to an uncontrolled stack allocation when decoding DateTime values with oversized timestamp extension lengths, leading to process termination.

Nerdbank.MessagePack denial-of-service stack-overflow messagepack
2r 1t