What's Changed
fix CVE-2022-41719 @ v2
Fixes
- Backport ext frame bounds validation to v2 by @shamaton in https://github.com/shamaton/msgpack/pull/66
- Validates ext frame bounds before invoking custom ext decoders.
- Adds regression tests for truncated ext and timestamp payloads.
Maintenance
- Add tagpr configuration for the v2 release line by @shamaton in https://github.com/shamaton/msgpack/pull/67