Vulnerability GO-2023-1631
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
3 years ago
March 14, 2023 at 04:47 PM UTC
Panic when parsing invalid messages in google.golang.org/protobuf
v1.29.0
v1.29.0
Summary
Panic when parsing invalid messages in google.golang.org/protobuf
Details
Parsing invalid messages can panic.
Parsing a text-format message which contains a potential number consisting of a minus sign, one or more characters of whitespace, and no further input will cause a panic.
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
2 years ago
Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON
v1.20.0 - v1.32.0 GHSA-8r3f-844c-mc37
v1.20.0 - v1.32.0 GHSA-8r3f-844c-mc37
Unknown
2 years ago
Infinite loop in JSON unmarshaling in google.golang.org/protobuf
v1.20.0 - v1.32.0 GO-2024-2611
v1.20.0 - v1.32.0 GO-2024-2611
High Risk
3 years ago
google.golang.org/protobuf vulnerable to panic leading to denial of service
v1.29.0 GHSA-hw7c-3rfg-p46j
v1.29.0 GHSA-hw7c-3rfg-p46j
Impacted packages
Timeline
Published
3 years ago
March 14, 2023 at 04:47 PM UTC
Last Modified
8 months ago
February 04, 2026 at 04:28 AM UTC