Lucene search
K

7 matches found

OSV
OSV
added 2026/04/29 12:45 a.m.0 views

SUSE-SU-2026:1653-1 Security update for protobuf

This update for protobuf fixes the following issues: Refresh fixes: - CVE-2025-4565: parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages can lead to crash due to RecursionError bsc1244663. - CVE-2026-0994: maxrecursiondepth limit can be bypass...

8.2CVSS5.7AI score0.00016EPSS
Exploits0References6
Broadcom
Broadcom
added 2026/03/03 12:0 a.m.14 views

Protobuf Pure-Python backend can be corrupted by exceeding the Python recursion limit

Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit. This can result in a Denial of service by crashin...

8.2CVSS6AI score0.00016EPSS
Exploits0
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-18401

Malicious code in bioql PyPI...

8.2CVSS6.3AI score0.00016EPSS
Exploits0References7
OSV
OSV
added 2025/07/04 2:42 p.m.3 views

OESA-2025-1713 protobuf security update

Security Fixes: Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit. This can result in a Denial of...

8.2CVSS7AI score0.00016EPSS
Exploits0References2
OSV
OSV
added 2025/06/16 4:2 p.m.1 views

GHSA-8QVM-5X2C-J2W7 protobuf-python has a potential Denial of Service issue

Summary Any project that uses Protobuf pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit. Reporter: Alexis Challande, Trail of Bits...

8.2CVSS6.3AI score0.00016EPSS
Exploits0References8
AlpineLinux
AlpineLinux
added 2025/06/16 2:50 p.m.2 views

CVE-2025-4565

Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit. This can result in a Denial of service by crashin...

8.2CVSS7.3AI score0.00016EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/06/16 12:0 a.m.2 views

PT-2025-25564

Name of the Vulnerable Software and Affected Versions: Protobuf versions prior to 6.31.1 Description: The issue affects projects that use the Protobuf Pure-Python backend to parse untrusted Protocol Buffers data. This data can contain an arbitrary number of recursive groups, recursive messages, o...

8.7CVSS8AI score0.00134EPSS
Exploits0References37
Rows per page
Query Builder