CVE-2026-21020-Protobuf-Message-Parsing-Polymorphic-Deserialization-Vulnerability

CVE-2026-21020 – Protobuf 메시지 파싱 다형성 역직렬화 취약점 프로그램 코드 Python with protobuf protovuln.py - Insecure handling of Any type import addressbookpb2 Example protobuf Simulated deserialization that trusts an injected typeurl from google.protobuf import anypb2 anymsg = anypb2.Any anymsg.typeurl =...