chemtsv2 (>=0.9.1, <=0.9.13), cohesion-pipeline (0.1.2) +8 more potentially affected by CVE-2025-4565 via protobuf (3.9.2)

protobuf PYPI version 3.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - chemtsv2 =0.9.1, =0.8.6, =0.8.7 - nerdvision 1.0.1 - pycloud-client 0.7.1 - qihoo-tensornet 0.208.0 - transactid 0.1.0a3 - zeebe-grpc 0.20.0.11...

PYSEC-2026-1806 protobuf-python has a potential Denial of Service issue

Summary Any project that uses Protobuf pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit. Reporter: Alexis Challande, Trail of Bits...

femtocrux (0.2.2), meteva (>=1.7.3, <=1.8.0.1) +3 more potentially affected by CVE-2025-4565 via protobuf (3.20.0rc2)

protobuf PYPI version 3.20.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - femtocrux 0.2.2 - meteva =1.7.3, =0.1.0, =0.0.2, =0.5.2, =1.0.0a8 Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

fancy-nlp (>=0.0.1, <=0.0.4), gm (>=3.0.0.82, <=3.0.0.107) +3 more potentially affected by CVE-2025-4565 via protobuf (3.4.0)

protobuf PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - fancy-nlp =0.0.1, =3.0.0.82, =0.0.1, =1.0.0, =0.3.4.2, =0.3.5 Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

pybfe (>=2020.8.13.285, <=2020.12.23.630) potentially affected by CVE-2025-4565 via protobuf (3.12.0rc2)

protobuf PYPI version 3.12.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - pybfe =2020.8.13.285, =2020.12.23.630 Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

ad-components (>=0.1.5, <=0.1.6), advance-common (>=1.1.0, <=1.3.1) +115 more potentially affected by CVE-2025-4565 via protobuf (3.19.4)

protobuf PYPI version 3.19.4 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - ad-components =0.1.5, =1.1.0, =1.2.1, =0.13.0, =1.5.0, =1.1.2, =0.3.4, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.4 and more Source cves:...

agrirouter (>=2.0.0a2, <=2.1.0a1), cloudfoundry-client (1.31.0) +24 more potentially affected by CVE-2025-4565 via protobuf (3.18.3)

protobuf PYPI version 3.18.3 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - agrirouter =2.0.0a2, =1.2.1, =0.12.1, =0.2.0a1, =0.7.0, =3.1.0, =1.7.0, =7.0.3, =7.0.4 - mitmproxy-escher 2.0.0 - nonebot-plugin-chatglm 0.1.6...

ag-llama-api (>=0.0.8, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.11) +118 more potentially affected by CVE-2025-4565 via protobuf (3.20.2)

protobuf PYPI version 3.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - ag-llama-api =0.0.8, =0.0.4, =0.0.4, =0.0.11, =1.31.1, =0.1.0, =0.3.3, =0.0.13, =0.0.2, =0.0.8 and more Source cves: CVE-2025-4565 Source...

admobilizeapis (>=0.0.5, <=0.0.7), c3-reference (1.8.1) +8 more potentially affected by CVE-2025-4565 via protobuf (3.6.0)

protobuf PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - admobilizeapis =0.0.5, =1.1.4, =1.0.5, =1.9.1, =1.10.0 Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

cloudscript (0.0.1), cloudview (0.3.2) +20 more potentially affected by CVE-2025-4565 via protobuf (3.10.0)

protobuf PYPI version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - cloudscript 0.0.1 - cloudview 0.3.2 - comics-down 0.2.0 - dataclay =1.0.7.dev20200310, =20210310.0.0, =2.3.0rc2, =1.14.0b1, =0.0.1, =5.0.0,...

coinlib (>=1.0.6, <=1.0.7), wave-api (>=0.1.0, <=0.1.2) potentially affected by CVE-2025-4565 via protobuf (3.15.3)

protobuf PYPI version 3.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - coinlib =1.0.6, =0.1.0, =0.1.2 Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

a2grunnerp (>=0.1.0, <=0.1.8), a62-emotion (>=0.10.11, <=0.11.4) +693 more potentially affected by CVE-2025-4565 via protobuf (3.19.6)

protobuf PYPI version 3.19.6 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - a2grunnerp =0.1.0, =0.10.11, =1.3.0, =1.1.1, =0.1.0, =0.0.157, =0.1.0, =1.2.36, =1.2.38 - aisdc 1.0.1 - aistnet 1.0.0 and more Source cves:...

cylc-flow (8.0.0a2), cylc-uiserver (0.2.0) +6 more potentially affected by CVE-2025-4565 via protobuf (3.12.1)

protobuf PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - cylc-flow 8.0.0a2 - cylc-uiserver 0.2.0 - flwr =0.1.0, =0.0.1.dev20200713, =1.8.5, =2.1.0b7, =0.0.1, =0.0.4 - zeebe-grpc 0.23.2.0 Source cves:...

admobilizeapis (>=0.0.8, <=0.0.28), bitbox02 (>=0.0.1, <=2.0.0) +13 more potentially affected by CVE-2025-4565 via protobuf (3.7.1)

protobuf PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - admobilizeapis =0.0.8, =0.0.1, =1.1.1, =0.0.0, =1.12.0b2, =0.7.0, =0.2.0, =0.14.0, =1.0.22, =1.0.2, =1.0.8 Source cves: CVE-2025-4565 Source...

2404-segmentation-pipeline (>=0.1.0, <=1.0.0), a7p (>=0.0.1, <=1.0.1rc1) +740 more potentially affected by CVE-2025-4565 via protobuf (>=4.0.0rc2, <=4.25.7)

protobuf PYPI version =4.0.0rc2, =0.1.0, =0.0.1, =0.1.2, =2026.2.10.1, =0.1.1, =1.0.0, =1.4.20, =0.1.36, =0.0.2, =0.9.1, =3.1.3, =3.1.6 - aiognmi 0.1.1 and more Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

esphome (>=1.19.0b1, <=1.19.4), fpgaconvnet-model (>=0.1.3, <=0.1.4.2) +6 more potentially affected by CVE-2025-4565 via protobuf (3.17.0)

protobuf PYPI version 3.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - esphome =1.19.0b1, =0.1.3, =4.5.1, =5.0.0 - rpc-common 0.0.9 - squeaknode-proto 0.1.7 Source cves: CVE-2025-4565 Source advisory:...

nucypher (>=0.1.0a29, <=1.2.0b1) potentially affected by CVE-2025-4565 via protobuf (3.10.0rc1)

protobuf PYPI version 3.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - nucypher =0.1.0a29, =1.2.0b1 Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

madan (0.0.1), openxc (2.2.0) potentially affected by CVE-2025-4565 via protobuf (3.17.1)

protobuf PYPI version 3.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - madan 0.0.1 - openxc 2.2.0 Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

alpha-data-py (>=1.0.0, <=1.0.9), beeper-hangups (>=0.5.0a1, <=0.5.0a5) +7 more potentially affected by CVE-2025-4565 via protobuf (3.16.0)

protobuf PYPI version 3.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - alpha-data-py =1.0.0, =0.5.0a1, =0.0.34, =0.20.5rc3, =0.2.0b1, =0.1.1.1, =4.4.0, =1.0.0, =1.0.1 Source cves: CVE-2025-4565 Source advisory:...

cnvrgv2 (>=1.0.0, <=1.0.6), deepomatic-rpc (>=0.8.8, <=0.8.10) +6 more potentially affected by CVE-2025-4565 via protobuf (3.17.2)

protobuf PYPI version 3.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - cnvrgv2 =1.0.0, =0.8.8, =1.0.0, =0.1.0, =1.0.0.dev0, =0.2.5, =0.11.1, =0.12.0 Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...