What is GHSA-c2wm-8rj3-h9cx?

GHSA-c2wm-8rj3-h9cx is a security advisory published by GitHub Security Advisories with Medium severity. An integer overflow vulnerability exists in MPack 1.1.1 in mpack_node_cstr_alloc() and...

Which CVE IDs does GHSA-c2wm-8rj3-h9cx cover?

GHSA-c2wm-8rj3-h9cx covers the following CVE IDs: CVE-2026-88350. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-c2wm-8rj3-h9cx?

GHSA-c2wm-8rj3-h9cx has a CVSS v3 base score of 6.2, published by GitHub Security Advisories.

GHSA-c2wm-8rj3-h9cxMediumCVSS 6.2

An integer overflow vulnerability exists in MPack 1.1.1 in mpack_node_cstr_alloc() and...

Vendor

GitHub Security Advisories

Published

September 22, 2026

Last Modified

October 1, 2026

🔗 CVE IDs covered (1)

CVE-2026-88350 →

📋 Description

An integer overflow vulnerability exists in MPack 1.1.1 in mpack_node_cstr_alloc() and mpack_node_utf8_cstr_alloc().

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-88350
https://github.com/ludocode/mpack/issues/124
https://github.com/ludocode/mpack/commit/3d54d1215bdb5478d3ddecaf85884c58b382cd9b
https://github.com/advisories/GHSA-c2wm-8rj3-h9cx