CVE-2026-0994 affecting package mysql for versions less than 8.0.45-2

CVE-2026-0994 affecting package mysql for versions less than 8.0.45-2. A patched version of the package is available...

openSUSE Security Advisory (SUSE-SU-2026:0374-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: libprotobuf-lite25_1_0 / libprotobuf-lite25_1_0-32bit / etc (SUSE-SU-2026:0374-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0374-1 advisory. - CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python jsonformat.ParseDict...

SUSE-SU-2026:0374-1 Security update for protobuf

This update for protobuf fixes the following issues: - CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python jsonformat.ParseDict bsc1257173...

PT-2026-6007

New security advisory deep dive. The openSUSE patches for Protobuf CVE-2026-0374 / 0994 aren't just routine updates—they're a case study in modern software supply chain risk. Read more: 👉 https://t.co/EBiImW9FLH Security https://t.co/J2lELRZjNc...

CVE-2026-0994 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datadog-agent, airflow, mlflow, semgrep, kubeflow-katib, mitmproxy, py3-cassandra-medusa, kserve, kubeflow-pipelines, open-webui, py3-protobuf...

CVE-2026-0994

A flaw was found in protobuf. A remote attacker can exploit this denial-of-service DoS vulnerability by supplying deeply nested google.protobuf.Any messages to the google.protobuf.jsonformat.ParseDict function. This bypasses the intended recursion depth limit, leading to the exhaustion of Python’...

CVE-2026-0994

creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:23+00:00| seen| https://gist.github.com/alon710/5baa2e680f8acff42001de482f43ce99 2026-01-24 22:16:11+00:00| seen| https://gist.github.com/alon710/66c5ee0ebadec10c9308f424b9b41e6c 2026-01-24 22:16:14+00:00| seen|...

SUSE CVE-2026-0994

A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can...

a2a-sdk (=0.2.8), a3t (>=0.0.0 <=0.0.1) +398 more potentially affected by CVE-2026-0994 via protobuf (>=6.30.1 <=6.33.4)

protobuf PYPI version =6.30.1, =0.0.0, =1.0.1, =0.1.3, =2025.12.2.2, =0.1.0, =0.4.0, =0.0.1, =0.1.17, =1.0.0, =1.0.29, =25.6.0b2, =0.1.0, =0.3.0, =0.9.1 and more Source cves: CVE-2026-0994 Source advisory: SNYK:PYTHON-PROTOBUF-15090738...

a2a-sdk (>=0.2.9 <=0.3.0), a2anet (>=0.0.5 <=0.2.0) +496 more potentially affected by CVE-2026-0994 via protobuf (>=5.26.0 <=5.29.5)

protobuf PYPI version =5.26.0, =0.2.9, =0.0.5, =0.4.0, =1.0.0, =0.1.0, =0.87.2.dev9, =0.82.3, =0.1.0.dev19, =1.3.0, =0.1.0, =0.0.1, =2.47.9, =2.47.11 - aip-agents-binary =0.0.0b2 and more Source cves: CVE-2026-0994 Source advisory: SNYK:PYTHON-PROTOBUF-15090738...

01os (=0.0.14), 0x-web3 (=5.0.0a5) +7339 more potentially affected by CVE-2026-0994 via protobuf (>=2.6.0 <=5.29.5)

protobuf PYPI version =2.6.0, =0.1.0, =0.1.0, =0.2.9, =0.0.5, =0.1.0, =0.1.0, =0.0.1, =0.1.2, =0.1.6, =0.2.0a0, =1.0.2, =2.3.5rc1 - abi-maker =0.1.0 and more Source cves: CVE-2026-0994 Source advisory: OSV:GHSA-7GCM-G887-7QV7...

a2a-sdk (=0.2.8), a3t (>=0.0.0 <=0.0.1) +398 more potentially affected by CVE-2026-0994 via protobuf (>=6.30.1 <=6.33.4)

protobuf PYPI version =6.30.1, =0.0.0, =1.0.1, =0.1.3, =2025.12.2.2, =0.1.0, =0.4.0, =0.0.1, =0.1.17, =1.0.0, =1.0.29, =25.6.0b2, =0.1.0, =0.3.0, =0.9.1 and more Source cves: CVE-2026-0994 Source advisory: OSV:GHSA-7GCM-G887-7QV7...

CVE-2026-0994

A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can...

CVE-2026-0994

A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can...

Linux Distros Unpatched Vulnerability : CVE-2026-0994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth limit can be bypassed when parsing...

CVE-2021-0994

In requestRouteToHostAddress of ConnectivityService.java, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interactio...

EUVD-2026-0994

Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tickera: from n/a through = 3.5.6.4...

Linux Distros Unpatched Vulnerability : CVE-2013-0994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2025-0994

Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable to a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer’s Microsoft Internet Information Services I...