Upgrading msgpack 0.7 to 1
Unknown0.7.6 → 1.8.7Security1
Fetching 51 releases from GitHub…9 / 51
SecurityLowMessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer DisclosureGHSA-4mrv-5p47-p938 · CVE-2026-54522 ↗
UnknownUpgrade verdict
DepDelta is still reading the notes for 42 of 51 releases, so breaking changes can't be ruled out yet.
In plain terms
- DepDelta is still reading the release notes in this range, so it can't rule out breaking changes yet.
- This page updates as the notes come in.
Must act 1 item needs code or config changes
Ruby requirement changed in 1.7.0: >= 0 → >= 2.5.
What you must change
Security1
MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure
Low