{"id":"GO-2026-4740","kind":"vulnerability","aliases":["GO-2026-4740"],"related":["CVE-2026-32284"],"title":"WITHDRAWN: Denial of service in github.com/shamaton/msgpack","description":"(This report has been withdrawn with reason: \"Duplicate of 4513\").","summary":"This Go vulnerability database entry for the shamaton msgpack library was withdrawn and marked as a duplicate of GO-2026-4513. The sources give no details of the flaw itself or what an attacker could do.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"github.com/shamaton/msgpack","fixed":[],"affected":"all versions","ecosystem":"go"},{"name":"github.com/shamaton/msgpack/v2","fixed":[],"affected":"all versions","ecosystem":"go"},{"name":"github.com/shamaton/msgpack/v3","fixed":[],"affected":"all versions","ecosystem":"go"}],"ecosystems":["go"],"tags":["go","msgpack","package"],"not_affected_if":[],"how_to_check":"- unknown","fix":"- Check the advisory GO-2026-4513 for the affected versions and fixed release of github.com/shamaton/msgpack (and /v2, /v3) and follow that guidance.","status":"withdrawn","published_at":"2026-03-23T18:14:47+00:00","first_seen_at":"2026-10-23T19:13:08+00:00","triaged_at":"2026-10-25T05:37:28+00:00","updated_at":"2026-10-25T05:37:28+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-25T05:37:28Z","model":"claude-haiku-5-5","output":{"fix":"- Check the advisory GO-2026-4513 for the affected versions and fixed release of github.com/shamaton/msgpack (and /v2, /v3) and follow that guidance.","reach":"unknown","title":"Go msgpack library: withdrawn denial-of-service report, duplicate of another entry","impact":"low","summary":"This Go vulnerability database entry for the shamaton msgpack library was withdrawn and marked as a duplicate of GO-2026-4513. The sources give no details of the flaw itself or what an attacker could do.","category":"package","nicknames":[],"who_cares":["go","msgpack"],"confidence":0.5,"needs_auth":"unknown","worst_case":"unknown; the report was withdrawn as a duplicate","analyst_note":"Check GO-2026-4513 at pkg.go.dev/vuln for the real description, affected versions and fixed release of shamaton/msgpack.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"This entry has been withdrawn as a duplicate, so it does not identify a separate affected population. Teams using github.com/shamaton/msgpack should follow the advisory it duplicates, GO-2026-4513, to determine exposure.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000568,"input_tokens":3306,"output_tokens":474,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':10A,13A,46B '-4513':47B '-4740':11A,14A '/shamaton/msgpack':8A,17A '/shamaton/msgpack/v2':20A '/shamaton/msgpack/v3':23A '4513':71C 'attack':60B 'could':61B 'databas':30B 'denial':2A 'detail':52B 'duplic':43B,69C 'entri':31B 'flaw':55B 'github.com':7A,16A,19A,22A 'github.com/shamaton/msgpack':6A,15A 'github.com/shamaton/msgpack/v2':18A 'github.com/shamaton/msgpack/v3':21A 'give':50B 'go':9A,12A,24B,28B,45B 'librari':36B 'mark':40B 'msgpack':25B,35B 'packag':26B 'reason':68C 'report':63C 'servic':4A 'shamaton':34B 'sourc':49B 'vulner':29B 'withdrawn':1A,38B,66C","nicknames":[],"mitigations":[],"who_affected":"This entry has been withdrawn as a duplicate, so it does not identify a separate affected population. Teams using github.com/shamaton/msgpack should follow the advisory it duplicates, GO-2026-4513, to determine exposure.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-03-23T18:14:47+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"govuln","external_id":"GO-2026-4740","url":"https://pkg.go.dev/vuln/GO-2026-4740","severity":null,"published_at":"2026-03-23T18:14:47+00:00","modified_at":"2026-10-07T14:09:50+00:00","first_seen_at":"2026-10-23T19:13:08+00:00","fetched_at":"2026-10-23T19:13:08+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}