---
id: "GO-2026-4740"
kind: "vulnerability"
aliases: ["GO-2026-4740"]
title: "WITHDRAWN: Denial of service in github.com/shamaton/msgpack"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "withdrawn"
category: "package"
products: [{"name": "github.com/shamaton/msgpack", "fixed": [], "affected": "all versions", "ecosystem": "go"}, {"name": "github.com/shamaton/msgpack/v2", "fixed": [], "affected": "all versions", "ecosystem": "go"}, {"name": "github.com/shamaton/msgpack/v3", "fixed": [], "affected": "all versions", "ecosystem": "go"}]
ecosystems: ["go"]
tags: ["go", "msgpack", "package"]
not_affected_if: []
published_at: "2026-03-23T18:14:47+00:00"
first_seen_at: "2026-10-23T19:13:08+00:00"
updated_at: "2026-10-25T05:37:28+00:00"
sources: [{"source": "govuln", "url": "https://pkg.go.dev/vuln/GO-2026-4740", "first_seen_at": "2026-10-23T19:13:08+00:00"}]
---

# WITHDRAWN: Denial of service in github.com/shamaton/msgpack

This Go vulnerability database entry for the shamaton msgpack library was withdrawn and marked as a duplicate of GO-2026-4513. The sources give no details of the flaw itself or what an attacker could do.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- go:github.com/shamaton/msgpack affected all versions fixed ?
- go:github.com/shamaton/msgpack/v2 affected all versions fixed ?
- go:github.com/shamaton/msgpack/v3 affected all versions fixed ?

## How to check

- unknown

## Fix

- Check the advisory GO-2026-4513 for the affected versions and fixed release of github.com/shamaton/msgpack (and /v2, /v3) and follow that guidance.

## Timeline

- 2026-10-23T19:13:08+00:00 govuln https://pkg.go.dev/vuln/GO-2026-4740

## From the sources

(This report has been withdrawn with reason: "Duplicate of 4513").

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_