{"dataType":"CVE_RECORD","cveMetadata":{"state":"PUBLISHED","cveId":"CVE-2026-106971","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","dateUpdated":"2026-10-29T17:10:24.531Z","dateReserved":"2026-10-07T00:00:00.000Z","datePublished":"2026-10-28T00:00:00.000Z"},"containers":{"cna":{"providerMetadata":{"orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre","dateUpdated":"2026-10-29T17:10:24.531Z"},"descriptions":[{"lang":"en","value":"An integer overflow in the MessagePack\\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service via crafted MessagePack input when the application runs on 32-bit PHP"}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://github.com/rybakit/msgpack.php"},{"url":"https://github.com/rybakit/msgpack.php/releases/tag/v0.11.0"},{"url":"https://github.com/diptendukar/security-advisories/blob/main/CVE-2026-106971.md"}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"n/a"}]}]}},"dataVersion":"5.2"}