arize (>=1.0.4, <=2.1.11), c7n-gcp (0.4.1) +1 more potentially affected by CVE-2025-4565 via protobuf (3.12.0)

protobuf PYPI version 3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - arize =1.0.4, =2.1.11 - c7n-gcp 0.4.1 - wirepas-mesh-messaging 1.2.0 Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

dftimewolf (20200608.0.0a0), drift-protocol (0.1.0) +7 more potentially affected by CVE-2025-4565 via protobuf (3.11.1)

protobuf PYPI version 3.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - dftimewolf 20200608.0.0a0 - drift-protocol 0.1.0 - drift-python-client =0.1.1, =0.0.1, =0.0.1, =5.8.8, =0.0.5, =0.0.11 Source cves: CVE-2025-45...

ap1 (>=0.0.2, <=0.0.7), avotes-parser-cli (>=0.0.0, <=0.4.3) +15 more potentially affected by CVE-2025-4565 via protobuf (3.18.0)

protobuf PYPI version 3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - ap1 =0.0.2, =0.0.0, =0.0.0, =1.0.2, =0.2.1, =0.2.0, =2.0.39, =0.9.271, =2.1.0, =0.8.1, =1.1.2, =0.4.0rc4, =0.5.0b18 and more Source cves:...

aquests (>=0.7.16.17, <=0.7.16.18), backend-ai-common (1.3.1) +6 more potentially affected by CVE-2025-4565 via protobuf (3.5.2.post1)

protobuf PYPI version 3.5.2.post1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - aquests =0.7.16.17, =1.3.2, =1.1.0, =0.4.1, =0.0.4, =0.8.2, =0.11.0 Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

bsk (2.8.33), bts-mlb (0.1.2) +41 more potentially affected by CVE-2025-4565 via protobuf (>=6.30.0, <=6.31.0)

protobuf PYPI version =6.30.0, =1.0.0, =4.0.7, =0.2.0b3, =1.0.1, =1.0.0, =1.10.0rc3, =0.0.0, =1.0.0rc1, =1.1.1 - isosegdenoise 0.1.2.dev310 and more Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

abeja-sdk (>=1.0.2rc1, <=1.0.2), adsmsg (>=1.1.2, <=1.1.5) +38 more potentially affected by CVE-2025-4565 via protobuf (3.11.3)

protobuf PYPI version 3.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - abeja-sdk =1.0.2rc1, =1.1.2, =0.0.2, =0.2.0, =1.1.1, =0.9.0.dev20200507040427, =0.1.0, =0.0.1, =0.5.0a0, =0.5.0a0.dev19, =0.17.0rc4, =0.17.0rc4...

nucypher (>=0.1.0a8, <=0.1.0a20) potentially affected by CVE-2025-4565 via protobuf (3.7.0rc2)

protobuf PYPI version 3.7.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - nucypher =0.1.0a8, =0.1.0a20 Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

kraken (>=0.7.5, <=0.7.6), worldengine (0.19.0) potentially affected by CVE-2025-4565 via protobuf (3.0.0a3)

protobuf PYPI version 3.0.0a3 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - kraken =0.7.5, =0.7.6 - worldengine 0.19.0 Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

0x-web3 (5.0.0a5), a42-proto (>=0.1.0, <=0.1.5) +2333 more potentially affected by CVE-2025-4565 via protobuf (3.20.3)

protobuf PYPI version 3.20.3 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - 0x-web3 5.0.0a5 - a42-proto =0.1.0, =2.1.2rc1, =0.0.1b1, =0.1.1, =0.1.0, =1.0.0, =3.3.0.2, =0.1.1619376243, =1.0.4, =0.0.3, =0.0.5 and more...

abi-maker (0.1.0), acapy-mydata-did-protocol (>=0.1.3, <=0.1.15) +187 more potentially affected by CVE-2025-4565 via protobuf (3.19.5)

protobuf PYPI version 3.19.5 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - abi-maker 0.1.0 - acapy-mydata-did-protocol =0.1.3, =1.1.1, =0.0.3, =0.1.0, =0.1.0, =1.0.0, =3.0.0, =3.0.0, =3.0.3 and more Source cves:...

baosnetlib-python (0.1.0), etcd-apiv3 (2.3.0.1) +2 more potentially affected by CVE-2022-1941 via protobuf (2.6.1)

protobuf PYPI version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - baosnetlib-python 0.1.0 - etcd-apiv3 2.3.0.1 - kaircs 0.4.0 - labeless =1.1.2.48, =1.1.6.0 Source cves: CVE-2022-1941 Source advisory:...

ad-components (>=0.1.5, <=0.1.6), advance-common (>=1.1.0, <=1.3.1) +198 more potentially affected by CVE-2022-1941 via protobuf (>=3.19.0, <=3.19.4)

protobuf PYPI version =3.19.0, =0.1.5, =1.1.0, =1.2.1, =0.13.0, =1.5.0, =3.0.4, =0.3.0, =0.8.0, =1.1.2, =0.1.0a1, =0.0.1, =0.1.2, =0.2.5 and more Source cves: CVE-2022-1941 Source advisory: OSV:PYSEC-2026-899...

aipose (>=0.4.0, <=3.2.0), alphafed (>=0.1.0, <=0.1.1) +46 more potentially affected by CVE-2022-1941 via protobuf (>=4.21.0rc2, <=4.21.5)

protobuf PYPI version =4.21.0rc2, =0.4.0, =0.1.0, =0.1.2, =0.0.12, =0.2.6, =0.0.20, =1.2.0, =1.1.2, =0.0.1, =0.0.7, =0.1.2, =0.1.4 - librespot 0.0.2 and more Source cves: CVE-2022-1941 Source advisory: OSV:PYSEC-2026-899...

abba-python (>=0.1.6, <=0.3.0), abeja-sdk (>=2.2.0rc1, <=2.3.5rc1) +536 more potentially affected by CVE-2022-1941 via protobuf (>=3.20.0, <=3.20.1)

protobuf PYPI version =3.20.0, =0.1.6, =2.2.0rc1, =0.8.3, =0.1.0, =0.0.0, =1.0.43, =0.1.6, =0.3.1a1, =1.0.0, =0.10.0, =0.20.0 and more Source cves: CVE-2022-1941 Source advisory: OSV:PYSEC-2026-899...

PYSEC-2026-899 protobuf-cpp and protobuf-python have potential Denial of Service issue

Summary A message parsing and memory management vulnerability in ProtocolBuffer’s C++ and Python implementations can trigger an out of memory OOM failure when processing a specially crafted message, which could lead to a denial of service DoS on services using the libraries. Reporter: ClusterFuzz...

Security Bulletin: Due to the use of Google Go, IBM Cloud Pak Sys is affected by an infinite loop when unmarshaling certain forms of invalid JSON

Summary Vulnerability in Go used by Cloud Pak System CVE-2024-24786. Vulnerability Details CVEID:CVE-2024-24786 DESCRIPTION: The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which...

PT-2026-54519

Name of the Vulnerable Software and Affected Versions buffa affected versions not specified Description The buffa protobuf decoder contains a memory-amplification issue. A malformed message can cause the library to consume up to 22 times the expected amount of RAM, leading to a denial of service...

Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.

Summary Maximo AI Service uses accelerate-1.6.0-py3-none-any.whl, protobuf-4.25.8-cp37-abi3-manylinux2014x8664.whl, pillow-10.3.0-cp311-cp311-manylinux228x8664.whl, langchain-0.3.23-py3-none-any.whl, nltk-3.9.1-py3-none-any.whl, langchaincore-0.3.81-py3-none-any.whl,...

CVE-2026-54269

A flaw was found in protobufjs, a JavaScript JS library for compiling protobuf definitions. A remote attacker could exploit this vulnerability by providing specially crafted protobuf definitions or message types that contain names colliding with internal protobufjs runtime helpers. This could lea...

RLSA-2023:6621 Moderate: protobuf-c security update

The protobuf-c packages provide C bindings for Google's Protocol Buffers. Security Fixes: protobuf-c: unsigned integer overflow in parserequiredmember CVE-2022-48468 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, ref...