Sitelet https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2295/files
Skip to content
Merged
Changes from all commits
Commits
Show all changes
32 commits
Select commit Hold shift + click to select a range
930293f
Merge pull request #1978 from BertanAygun/bertan/issue1952
AArnott Oct 2, 2024
db8a242
Update unit tests to include a custom generic type.
BertanAygun Apr 9, 2025
0b9d9a4
Merge pull request #2183 from BertanAygun/bertan/issue1952v2
AArnott Apr 10, 2025
71892eb
Build v2.5 as stable from v2.x
AArnott Apr 10, 2025
58be50d
Backport .gitignore from master
AArnott May 14, 2026
9e214ba
Build on Ubuntu 22
AArnott May 15, 2026
c27960c
Merge pull request #2264 from MessagePack-CSharp/update-v2.x-minimal
AArnott May 15, 2026
94b32dd
Add more types to the default disallow list of named types to be dese…
AArnott Mar 30, 2026
1eecfe0
Merge pull request #2263 from MessagePack-CSharp/safer-type-deseriali…
AArnott May 15, 2026
3538bc1
Bound LZ4 input reads for CWE-125
AArnott Apr 29, 2026
adeb4ef
Add test to verify that we reject invalid DateTime ext lengths for CW…
AArnott May 15, 2026
e97f71e
Use secure lookup comparer for CWE-407
AArnott Apr 29, 2026
dc6f632
Fix CWE-789 multidimensional array allocation validation
AArnott Apr 29, 2026
7b12e5b
Guard JSON conversion depth for CWE-674
AArnott Apr 29, 2026
e01f07c
Validate Unity blit lengths for CWE-789
AArnott Apr 29, 2026
940b850
Guard dynamic union depth for CWE-674
AArnott Apr 29, 2026
9674352
Guard typeless JSON depth for CWE-674
AArnott Apr 29, 2026
a3c8a18
Avoid JSON separator recursion for CWE-674
AArnott Apr 29, 2026
0124048
Fix CWE-190 map header length overflow
AArnott Apr 29, 2026
ae90f2b
Limit untrusted ExpandoObject maps for CWE-407
AArnott Apr 29, 2026
c98d31f
Default MVC input formatter to UntrustedData for CWE-1188
AArnott Apr 29, 2026
696b4a7
Use iteration for skipping msgpack structures for CWE-674
AArnott May 13, 2026
826f17c
Reject nested typeless blocklist bypass for CWE-502
AArnott Apr 29, 2026
853429a
Guard LZ4 decompression length for CWE-409
AArnott Apr 29, 2026
b0f8c5e
Fix WriteRawX methods to advance by written length
AArnott May 14, 2026
7027e91
Fix several security issues
AArnott May 15, 2026
814bc4c
Honor TypeFormatter options hooks for CWE-470
AArnott Apr 29, 2026
5657b1e
Merge branch 'MESSAGEPACKCSHARP-OPEN-008-v2' into v2.x-fix-all
AArnott May 18, 2026
ffb151a
Add several known unsafe 'gadgets' to the disallow list
AArnott May 21, 2026
81b03dc
Merge pull request #2269 from MessagePack-CSharp/add-more-disallowed-…
AArnott May 21, 2026
b611da8
Merge security fixes to v2.x
AArnott Jun 9, 2026
01eeb12
Merge remote-tracking branch 'origin/v2.x' into v2-to-master
AArnott Sep 3, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view

These merge commits were added into this branch cleanly.

There are no new changes to show.