Allocation of Resources Without Limits or Throttling

Overview google/protobuf is a proto library for PHP Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to missing validation in the readRaw function in the CodedInputStream class. An attacker can exhaust all PHP workers and cause denial of...

CVE-2025-53605

The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::codedinputstream::CodedInputStream::skipgroup parsing of unknown fields in untrusted input...

CVE-2025-53605: Uncontrolled Recursion

The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::codedinputstream::CodedInputStream::skipgroup parsing of unknown fields in untrusted input...