msgpack-java

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. MessagePack-Java Vulnerable to Remote Denial of Service via Malicious .msgpack Model File Triggering Unbounded EXT Payload AllocationCVE-2026-21452msgpack · CVSS 7.5 · 0.6% likely

   CWE-789

2. msgpack-java through 0.9.12 Stack Overflow via Nested ArraysCVE-2026-90472msgpack · CVSS 5.3 · 0.6% likely

   CWE-674

3. msgpack-java through 0.9.12 Integer Overflow via MAP32CVE-2026-90473msgpack · CVSS 5.3 · 0.4% likely

   CWE-190

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.