41 matches found
com.aerospike:aerospike-proxy-stub (1.1.0), com.android.designcompose:common (>=0.28.0-rc01, <=0.29.0) +11 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-kotlin (>=4.26.0, <=4.27.2)
com.google.protobuf:protobuf-kotlin MAVEN version =4.26.0, =0.28.0-rc01, =0.6.0, =0.5.9, =0.6.0, =0.2.2, =0.2.2, =0.18.0, =0.3.0, =0.5.0 Source cves: CVE-2024-7254 Source advisory: GHSA-735F-PC8J-V9W8...
GHSA-735F-PC8J-V9W8 protobuf-java has potential Denial of Service issue
Summary When parsing unknown fields in the Protobuf Java Lite and Full library, a maliciously crafted message can cause a StackOverflow error and lead to a program crash. Reporter: Alexis Challande, Trail of Bits Ecosystem Security Team Affected versions: This issue affects all versions of both t...
ai.cheq.sst.android:cheq-sst-kotlin-protobuf (>=0.1.0, <=0.1.3), com.android.designcompose:common (>=0.29.1, <=0.30.0) +1 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-kotlin-lite (>=4.26.0, <=4.27.3)
com.google.protobuf:protobuf-kotlin-lite MAVEN version =4.26.0, =0.1.0, =0.29.1, =0.6.0, =0.7.0 Source cves: CVE-2024-7254 Source advisory: GHSA-735F-PC8J-V9W8...
com.aerospike:aerospike-proxy-stub (1.1.0), com.android.designcompose:common (>=0.28.0-rc01, <=0.29.0) +11 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-kotlin (>=4.26.0, <=4.27.2)
com.google.protobuf:protobuf-kotlin MAVEN version =4.26.0, =0.28.0-rc01, =0.6.0, =0.5.9, =0.6.0, =0.2.2, =0.2.2, =0.18.0, =0.3.0, =0.5.0 Source cves: CVE-2024-7254 Source advisory: OSV:GHSA-735F-PC8J-V9W8...
be.zvz:kotlininside (>=1.14.0, <=1.16.2), com.connectrpc:connect-kotlin-google-javalite-ext (>=0.2.0, <=0.5.1) +14 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-kotlin-lite (>=3.17.1, <=3.25.3)
com.google.protobuf:protobuf-kotlin-lite MAVEN version =3.17.1, =1.14.0, =0.2.0, =16.0.0-alpha01, =7.7.1, =7.7.1, =0.2.19-alpha.3, =2.1.23, =0.1.0, =0.3.1, =0.1.1, =0.1.1, =3.23.2, =0.100.0, =0.138.1 and more Source cves: CVE-2024-7254 Source advisory: GHSA-735F-PC8J-V9W8...
ai.cheq.sst.android:cheq-sst-kotlin-protobuf (>=0.1.0, <=0.1.3), com.android.designcompose:common (>=0.29.1, <=0.30.0) +1 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-kotlin-lite (>=4.26.0, <=4.27.3)
com.google.protobuf:protobuf-kotlin-lite MAVEN version =4.26.0, =0.1.0, =0.29.1, =0.6.0, =0.7.0 Source cves: CVE-2024-7254 Source advisory: OSV:GHSA-735F-PC8J-V9W8...
com.trendyol:stove-testing-e2e-kafka (>=0.13.0, <=0.13.1) potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-kotlin (4.28.0)
com.google.protobuf:protobuf-kotlin MAVEN version 4.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.protobuf:protobuf-kotlin and may be impacted: - com.trendyol:stove-testing-e2e-kafka =0.13.0, =0.13.1 Source cves: CVE-2024-7254 Source...
protobuf-java has potential Denial of Service issue
Summary When parsing unknown fields in the Protobuf Java Lite and Full library, a maliciously crafted message can cause a StackOverflow error and lead to a program crash. Reporter: Alexis Challande, Trail of Bits Ecosystem Security Team Affected versions: This issue affects all versions of both t...
be.zvz:kotlininside (>=1.14.0, <=1.16.2), com.connectrpc:connect-kotlin-google-javalite-ext (>=0.2.0, <=0.5.1) +14 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-kotlin-lite (>=3.17.1, <=3.25.3)
com.google.protobuf:protobuf-kotlin-lite MAVEN version =3.17.1, =1.14.0, =0.2.0, =16.0.0-alpha01, =7.7.1, =7.7.1, =0.2.19-alpha.3, =2.1.23, =0.1.0, =0.3.1, =0.1.1, =0.1.1, =3.23.2, =0.100.0, =0.138.1 and more Source cves: CVE-2024-7254 Source advisory: MEND:CVE-2024-7254...
com.aerospike:aerospike-proxy-stub (1.1.0), com.android.designcompose:common (>=0.28.0-rc01, <=0.29.0) +11 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-kotlin (>=4.26.0, <=4.27.2)
com.google.protobuf:protobuf-kotlin MAVEN version =4.26.0, =0.28.0-rc01, =0.6.0, =0.5.9, =0.6.0, =0.2.2, =0.2.2, =0.18.0, =0.3.0, =0.5.0 Source cves: CVE-2024-7254 Source advisory: MEND:CVE-2024-7254...
com.trendyol:stove-testing-e2e-kafka (>=0.13.0, <=0.13.1) potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-kotlin (4.28.0)
com.google.protobuf:protobuf-kotlin MAVEN version 4.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.protobuf:protobuf-kotlin and may be impacted: - com.trendyol:stove-testing-e2e-kafka =0.13.0, =0.13.1 Source cves: CVE-2024-7254 Source...
ai.cheq.sst.android:cheq-sst-kotlin-protobuf (>=0.1.0, <=0.1.3), com.android.designcompose:common (>=0.29.1, <=0.30.0) +1 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-kotlin-lite (>=4.26.0, <=4.27.3)
com.google.protobuf:protobuf-kotlin-lite MAVEN version =4.26.0, =0.1.0, =0.29.1, =0.6.0, =0.7.0 Source cves: CVE-2024-7254 Source advisory: MEND:CVE-2024-7254...
ai.looktech:maestro-cli (>=2.6.0-looktech.1, <=2.10.0-looktech.0), ai.looktech:maestro-client (>=2.6.0-looktech.1, <=2.10.0-looktech.0) +186 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-kotlin (>=3.17.3, <=3.25.3)
com.google.protobuf:protobuf-kotlin MAVEN version =3.17.3, =2.6.0-looktech.1, =2.6.0-looktech.1, =2.6.0-looktech.1, =2.6.0-looktech.1, =1.0.0-beta1, =1.0.0-beta1, =7.0.0, =0.5.0, =0.0.1-alpha02, =31.9.0-alpha07, =31.9.0-alpha07, =31.9.0-alpha07, =31.9.0-alpha07, =31.9.0-alpha07, =31.9.0-alpha07,...
com.google.ambient.crossdevice:crossdevice (0.1.0-preview01), com.google.protobuf:protobuf-kotlin-lite (>=3.21.0, <=3.21.6) +12 more potentially affected by CVE-2022-3510 via com.google.protobuf:protobuf-javalite (>=3.21.0, <=3.21.6)
com.google.protobuf:protobuf-javalite MAVEN version =3.21.0, =3.21.0, =2.15.0, =2.15.0, =0.4.6, =0.4.6, =0.4.6, =0.4.6, =7.3.0, =7.3.0, =0.3.1, =0.3.5, =1.48.0, =1.49.1 Source cves: CVE-2022-3510 Source advisory: OSV:GHSA-4GG5-VX3J-XWC7...
be.zvz:kotlininside (>=1.14.0, <=1.14.6), com.google.protobuf:protobuf-kotlin-lite (>=3.20.0, <=3.20.2) +8 more potentially affected by CVE-2022-3509 via com.google.protobuf:protobuf-javalite (>=3.20.0, <=3.20.2)
com.google.protobuf:protobuf-javalite MAVEN version =3.20.0, =1.14.0, =3.20.0, =2.12.0, =2.12.0, =2.3.0, =0.2.4, =0.2.6 - io.github.dimensiondev:maskwalletcore 0.5.0 Source cves: CVE-2022-3509 Source advisory: OSV:GHSA-G5WW-5JH7-63CX...
be.zvz:kotlininside (>=1.14.0, <=1.14.6), com.google.protobuf:protobuf-kotlin-lite (>=3.20.0, <=3.20.2) +8 more potentially affected by CVE-2022-3510 via com.google.protobuf:protobuf-javalite (>=3.20.0, <=3.20.2)
com.google.protobuf:protobuf-javalite MAVEN version =3.20.0, =1.14.0, =3.20.0, =2.12.0, =2.12.0, =2.3.0, =0.2.4, =0.2.6 - io.github.dimensiondev:maskwalletcore 0.5.0 Source cves: CVE-2022-3510 Source advisory: MEND:CVE-2022-3510...
io.github.dimensiondev:maskwalletcore (>=0.1.0, <=0.4.1) potentially affected by CVE-2022-3171 via com.google.protobuf:protobuf-kotlin-lite (>=3.17.1, <=3.17.3)
com.google.protobuf:protobuf-kotlin-lite MAVEN version =3.17.1, =0.1.0, =0.4.1 Source cves: CVE-2022-3171 Source advisory: MEND:CVE-2022-3171...
com.google.ambient.crossdevice:crossdevice (0.1.0-preview01), com.google.protobuf:protobuf-kotlin-lite (>=3.21.0-rc-1, <=3.21.6) +12 more potentially affected by CVE-2022-3171 via com.google.protobuf:protobuf-javalite (>=3.21.0-rc-1, <=3.21.6)
com.google.protobuf:protobuf-javalite MAVEN version =3.21.0-rc-1, =3.21.0-rc-1, =2.15.0, =2.15.0, =0.4.6, =0.4.6, =0.4.6, =0.4.6, =7.3.0, =7.3.0, =0.3.1, =0.3.5, =1.48.0, =1.49.1 Source cves: CVE-2022-3171 Source advisory: MEND:CVE-2022-3171...
com.figure.classification.asset:ac-util (>=2.0.0, <=2.0.0-figuretest10), com.google.privacy.differentialprivacy.pipelinedp4j:pipelinedp4j (>=0.0.1, <=0.0.3) +65 more potentially affected by CVE-2022-3171 via com.google.protobuf:protobuf-kotlin (>=3.17.3, <=3.19.4)
com.google.protobuf:protobuf-kotlin MAVEN version =3.17.3, =2.0.0, =0.0.1, =57.0.0-v202207070922-beta, =57.0.0-v202207070922-beta, =0.8.0, =1.0.0, =1.0.0, =0.1.0, =0.0.1-rc33, =0.2.0, =0.0.1-release, =1.0.0, =1.0.1, =1.0.4 and more Source cves: CVE-2022-3171 Source advisory: MEND:CVE-2022-3171...
be.zvz:kotlininside (>=1.14.0, <=1.14.6), io.github.dimensiondev:maskwalletcore (0.5.0) potentially affected by CVE-2022-3171 via com.google.protobuf:protobuf-kotlin-lite (>=3.20.0, <=3.20.1)
com.google.protobuf:protobuf-kotlin-lite MAVEN version =3.20.0, =1.14.0, =1.14.6 - io.github.dimensiondev:maskwalletcore 0.5.0 Source cves: CVE-2022-3171 Source advisory: MEND:CVE-2022-3171...