ROS-20260810-73-0001

The vulnerability of the protobuf data serialization library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

Photon OS 5.0: Protobuf PHSA-2023-5.0-91-0022

An update of the protobuf package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0022. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Protobuf PHSA-2026-5.0-91-0825

An update of the protobuf package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0825. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Protobuf PHSA-2025-5.0-91-0456

An update of the protobuf package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0456. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Protobuf PHSA-2026-5.0-91-0849

An update of the protobuf package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0849. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Important Photon OS Security Update - PHSA-2026-5.0-92-0949

Updates of 'protobuf' packages of Photon OS have been released...

CVE-2026-52878 Klever-Go: Unauthenticated nil-pointer DoS in P2P transaction validation can halt the chain

Klever-Go is the Go implementation of the Klever blockchain protocol. Versions 1.7.14 through 1.7.17 are vulnerable to a nil-pointer panic triggered by a protobuf Transaction whose embedded RawData sub-message is omitted. This omission causes RawData to decode to nil. Every transaction gossiped o...

CVE-2026-52878

CVE-2026-52878 affects Klever-Go (versions 1.7.14–1.7.17). A nil RawData sub-message in protobuf Transaction triggers a nil-pointer panic when txVersionChecker.CheckTxVersion dereferences tx.RawData.Version without a nil check, causing a crash in the libp2p pubsub/the node process. The crash prop...

Photon OS 5.0: Protobuf PHSA-2025-5.0-92-0456

An update of the protobuf package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-92-0456. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-67198

Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that allows unauthenticated remote attackers to crash the server process by sending malformed or incomplete protobuf messages. Attackers can send well-formed requests such as ViewToArrowReq with ...

CLSA-2026-1779410884 TuxCare security update for com.google.protobuf (1 CVE)

TuxCare rebuilt 8 com.google.protobuf packages to address 1 CVE. Fixed in 3.21.9-tuxcare.2...

CLSA-2026-1778633123 TuxCare security update for google/protobuf (1 CVE)

TuxCare rebuilt google/protobuf to address 1 CVE. Fixed in 3.24.4-p1+tuxcare...

CLSA-2026-1777250321 TuxCare security update for com.google.protobuf (1 CVE)

TuxCare rebuilt 7 com.google.protobuf packages to address 1 CVE. Fixed in 3.21.1-tuxcare.2...

CLSA-2026-1774398095 TuxCare security update for com.google.protobuf (1 CVE)

TuxCare rebuilt 7 com.google.protobuf packages to address 1 CVE. Fixed in 3.21.1-tuxcare.1...

CLSA-2025-1762906010 TuxCare security update for com.google.protobuf:protobuf-java (2 CVEs)

TuxCare rebuilt com.google.protobuf:protobuf-java to address 2 CVEs. Fixed in 2.6.1-tuxcare.1...

CLSA-2025-1756080325 TuxCare security update for com.google.protobuf:protobuf-java (2 CVEs)

TuxCare rebuilt com.google.protobuf:protobuf-java to address 2 CVEs. Fixed in 2.5.0-tuxcare.1...

CVE-2026-67198

Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that allows unauthenticated remote attackers to crash the server process by sending malformed or incomplete protobuf messages. Attackers can send well-formed requests such as ViewToArrowReq with ...

CVE-2026-67198

Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that allows unauthenticated remote attackers to crash the server process by sending malformed or incomplete protobuf messages. Specifically, sending well-formed requests such as ViewToArrowReq wi...

CVE-2026-67198 Perspective 5.0.0 DoS via VirtualServer Protocol Dispatcher

Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that allows unauthenticated remote attackers to crash the server process by sending malformed or incomplete protobuf messages. Attackers can send well-formed requests such as ViewToArrowReq with ...

CVE-2026-67195 Perspective 5.0.0 RCE via eval() Expression Injection

Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary operating system commands by submitting crafted expression strings to the PolarsVirtualServer backend, which passes client-supplied input directly to Python's eval with only...