Google.Golang.Org/Protobuf vulnerabilities
2 vulnerabilities
Known vulnerabilities in Google.Golang.Org/Protobuf products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 4 products.
Products
4- Google.Golang.Org/Protobuf/Encoding/Protojson1 vulnerabilities
- Google.Golang.Org/Protobuf/Encoding/Prototext1 vulnerabilities
- Google.Golang.Org/Protobuf/Internal/Encoding/Json1 vulnerabilities
- Google.Golang.Org/Protobuf/Internal/Encoding/Text1 vulnerabilities
PrioritiseCVE-2024-24786google.golang.org/protobuf · google.golang.org/protobuf/encoding/protojson +1182 moreInfinite loop in JSON unmarshaling in google.golang.org/protobufThe protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.CVSS7.5HighEPSS1.26%PrioritiseCVE-2023-24535google.golang.org/protobuf · google.golang.org/protobuf/encoding/prototext +8 morePanic when parsing invalid messages in google.golang.org/protobufParsing invalid messages can panic. Parsing a text-format message which contains a potential number consisting of a minus sign, one or more characters of whitespace, and no further input will cause a panic.CVSS7.5HighEPSS1.09%