[github.com/shamaton/msgpack/v2] MessagePack for Golang subject to DoS via Unmarshal panic

Unmarshal can panic on some inputs, possibly allowing for denial of service attacks. This issue has been patched in version 2.1.1.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-41719
• https://github.com/shamaton/msgpack/issues/31
• https://github.com/shamaton/msgpack/pull/32
• https://pkg.go.dev/vuln/GO-2022-0972
• https://github.com/shamaton/msgpack/releases/tag/v2.1.1
• https://github.com/advisories/GHSA-jr77-8gx4-h5qh