{"id":"GO-2026-4740","summary":"WITHDRAWN: Denial of service in github.com/shamaton/msgpack","details":"(This report has been withdrawn with reason: \"Duplicate of 4513\").","aliases":["CVE-2026-32284","GHSA-h9q6-hc68-35rp","GO-2026-4513"],"modified":"2026-10-07T17:45:08.796097599Z","published":"2026-03-23T18:14:47Z","withdrawn":"2026-10-01T16:21:21Z","related":["CVE-2026-32284"],"database_specific":{"url":"https://pkg.go.dev/vuln/GO-2026-4740","review_status":"REVIEWED"},"references":[{"type":"REPORT","url":"https://github.com/shamaton/msgpack/issues/59"},{"type":"WEB","url":"https://github.com/advisories/GHSA-h9q6-hc68-35rp"},{"type":"WEB","url":"https://github.com/golang/vulndb/issues/4513"},{"type":"WEB","url":"https://securityinfinity.com/research/shamaton-msgpack-oob-panic-fixext-dos-2026"}],"affected":[{"package":{"name":"github.com/shamaton/msgpack","ecosystem":"Go","purl":"pkg:golang/github.com/shamaton/msgpack"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2026-4740.json"}},{"package":{"name":"github.com/shamaton/msgpack/v2","ecosystem":"Go","purl":"pkg:golang/github.com/shamaton/msgpack/v2"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2026-4740.json"}},{"package":{"name":"github.com/shamaton/msgpack/v3","ecosystem":"Go","purl":"pkg:golang/github.com/shamaton/msgpack/v3"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2026-4740.json"}}],"schema_version":"1.9.0"}