CVE-2021-45692: Messagepack-RS Project Messagepack-RS

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_extension_others may read from uninitialized memory locations.

Affected products

• Messagepack-RS Project Messagepack-RS: before 0.8.1 (fixed in 0.8.1)

Published 2021-12-27. Last modified 2026-06-17.