{"vulnerability": "cve-2026-92707", "sightings": [{"uuid": "d1bdf816-0b4f-47c5-b7db-e3edae482e65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-92707", "type": "seen", "source": "https://bsky.app/profile/startdebugging.bsky.social/post/3mvtpademj227", "content": "A 32 KiB MessagePack payload allocated 120 MiB before the depth limit fired. 3.1.9 and 2.5.303 fix it; SignalR needs a manual pin.\nhttps://startdebugging.net/2026/09/messagepack-3-1-9-fixes-nested-array-memory-amplification-cve-2026-92707/?utm_source=bluesky&utm_medium=social&utm_campaign=auto", "creation_timestamp": "2026-09-19T03:06:12.491711Z"}]}