id: GO-2022-0972
modules:
    - module: github.com/shamaton/msgpack/v2
      versions:
        - fixed: 2.1.1
      vulnerable_at: 2.1.0
      packages:
        - package: github.com/shamaton/msgpack/v2
          symbols:
            - Unmarshal
summary: Panic in github.com/shamaton/msgpack/v2
description: |-
    Unmarshal can panic on some inputs, possibly allowing for denial of service
    attacks.
ghsas:
    - GHSA-jr77-8gx4-h5qh
credits:
    - Red Canary
references:
    - report: https://github.com/shamaton/msgpack/issues/31
    - fix: https://github.com/shamaton/msgpack/pull/32
cve_metadata:
    id: CVE-2022-41719
    cwe: 'CWE 400: Uncontrolled Resource Consumption'