Post
startdebugging.bsky.social
did:plc:xkjmuxggw3vabc5fchdgso3h
A 32 KiB MessagePack payload allocated 120 MiB before the depth limit fired. 3.1.9 and 2.5.303 fix it; SignalR needs a manual pin.
https://startdebugging.net/2026/09/messagepack-3-1-9-fixes-nested-array-memory-amplification-cve-2026-92707/?utm_source=bluesky&utm_medium=social&utm_campaign=auto
2026-09-19T03:06:11.667Z