141 matches found
ROOT-APP-NPM-CVE-2026-89418 CVE-2026-89418 in google-protobuf - Patched by Root
Root has patched CVE-2026-89418 in the google-protobuf package for Root:npm. Multiple fixed versions available...
UBUNTU-CVE-2026-54451
Elixir protobuf is a pure Elixir implementation of Google Protobuf. From 0.8.0 until 0.16.1, services that decode attacker-controlled protobuf bytes with Protobuf.Decoder can be taken offline when the schema contains a self-referential or cyclic message type. In lib/protobuf/decoder.ex,...
CVE-2026-89418
google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small crafted payload of deeply nested STARTGROUP wire bytes to any Node.js service that calls the generated deserializeBinary API, causing a RangeError: Maximum call stack size...
AZL-103491 CVE-2026-89418 affecting package python-tensorboard 2.16.2-6
google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small crafted payload of deeply nested STARTGROUP wire bytes to any Node.js service that calls the generated deserializeBinary API, causing a RangeError: Maximum call stack size...
CVE-2026-89418
A flaw was found in google-protobuf. An unauthenticated remote attacker can send a specially crafted message containing deeply nested protobuf group fields to a Node.js service using the affected library. This uncontrolled recursion can cause the service to crash, leading to a Denial of Service D...
CVE-2026-89418
google-protobuf (protobuf-javascript) is vulnerable to unbounded recursion when parsing unknown protobuf group fields. An unauthenticated attacker can send a small crafted payload of deeply nested START_GROUP wire bytes to any Node.js service calling the generated deserializeBinary() API, trigger...
EUVD-2026-81523
google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small crafted payload of deeply nested STARTGROUP wire bytes to any Node.js service that calls the generated deserializeBinary API, causing a RangeError: Maximum call stack size...
CVE-2026-89418 Uncontrolled Recursion leading to Denial of Service in protobuf-javascript (google-protobuf)
google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small crafted payload of deeply nested STARTGROUP wire bytes to any Node.js service that calls the generated deserializeBinary API, causing a RangeError: Maximum call stack size...
CVE-2026-89418 Uncontrolled Recursion leading to Denial of Service in protobuf-javascript (google-protobuf)
google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small crafted payload of deeply nested STARTGROUP wire bytes to any Node.js service that calls the generated deserializeBinary API, causing a RangeError: Maximum call stack size...
@aliceo2/control (>=2.0.2, <=2.1.0), @firestore-emulator/jest (>=0.3.6, <=0.3.15) +42 more potentially affected by CVE-2026-89418 via google-protobuf (>=4.0.0-rc.2, <=4.0.2)
google-protobuf NPM version =4.0.0-rc.2, =2.0.2, =0.3.6, =0.3.6, =0.3.6, =1.56.0, =5.5.3, =7.1.3, =5.4.2, =2.0.2, =8.7.1, =1.0.0, =1.0.0, =1.0.0, =2.3.13 and more Source cves: CVE-2026-89418 Source advisory: MEND:CVE-2026-89418...
PT-2026-94302
Name of the Vulnerable Software and Affected Versions google-protobuf affected versions not specified Description The software contains an unbounded recursion issue when parsing unknown protobuf group fields. An attacker can send a crafted payload consisting of deeply nested START GROUP wire byte...
CVE-2026-89418: Uncontrolled Recursion
google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small crafted payload of deeply nested STARTGROUP wire bytes to any Node.js service that calls the generated deserializeBinary API, causing a RangeError: Maximum call stack size...
CLSA-2026-1787916992 TuxCare security update for google/protobuf (1 CVE)
TuxCare rebuilt google/protobuf to address 1 CVE. Fixed in 3.25.9-p1+tuxcare...
PT-2026-86885
TuxCare rebuilt google/protobuf to address 1 CVE. Fixed in 3.25.9-p1+tuxcare...
CLSA-2026-1779410884 TuxCare security update for com.google.protobuf (1 CVE)
TuxCare rebuilt 8 com.google.protobuf packages to address 1 CVE. Fixed in 3.21.9-tuxcare.2...
CLSA-2026-1778633123 TuxCare security update for google/protobuf (1 CVE)
TuxCare rebuilt google/protobuf to address 1 CVE. Fixed in 3.24.4-p1+tuxcare...
CLSA-2026-1777250321 TuxCare security update for com.google.protobuf (1 CVE)
TuxCare rebuilt 7 com.google.protobuf packages to address 1 CVE. Fixed in 3.21.1-tuxcare.2...
CLSA-2026-1774398095 TuxCare security update for com.google.protobuf (1 CVE)
TuxCare rebuilt 7 com.google.protobuf packages to address 1 CVE. Fixed in 3.21.1-tuxcare.1...