modules:
  - module: github.com/shamaton/msgpack/v2
    versions:
      - fixed: 2.1.1
    vulnerable_at: 2.1.0
    packages:
      - package: github.com/shamaton/msgpack/v2
        symbols:
          - Unmarshal
summary: 'TODO(https://go.dev/issue/56443): fill in summary field'
description: |
    Unmarshal can panic on some inputs, possibly allowing for denial
    of service attacks.
ghsas:
  - GHSA-jr77-8gx4-h5qh
credits:
  - Red Canary
references:
  - report: https://github.com/shamaton/msgpack/issues/31
  - fix: https://github.com/shamaton/msgpack/pull/32
cve_metadata:
    id: CVE-2022-41719
    cwe: 'CWE 400: Uncontrolled Resource Consumption'