Google.Golang.Org/Protobuf/Encoding/Protojson vulnerabilities

1 vulnerability

Known vulnerabilities in Google.Golang.Org/Protobuf/Encoding/Protojson, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

PrioritiseCVE-2024-24786google.golang.org/protobuf · google.golang.org/protobuf/encoding/protojson +1182 moreInfinite loop in JSON unmarshaling in google.golang.org/protobufThe protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.CVSS7.5HighEPSS1.26%