Vulnerabilities

Last updated 51 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
protobuf Uncontrolled recursion in elixir-protobuf/protobuf JSON decoding of self-referential messages Unknown 4 hours ago 3 hours ago
protobufjs protobufjs: Denial of service through unbounded Any expansion during JSON conversion High Risk 7.5 3 months ago 29 days ago
protobufjs protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion Medium Risk 5.3 4 months ago 29 days ago
protobufjs protobuf.js: Process-wide denial of service through unsafe option paths High Risk 7.5 4 months ago 29 days ago
protobufjs protobuf.js: Denial of service from crafted field names in generated code Medium Risk 5.3 4 months ago 29 days ago
protobufjs protobufjs has overlong UTF-8 decoding Medium Risk 5.3 4 months ago 29 days ago
@protobufjs/utf8 protobufjs has overlong UTF-8 decoding Medium Risk 5.3 4 months ago 29 days ago
protobufjs-cli protobufjs-cli: Code injection in pbjs static output from crafted JSON descriptor names High Risk 8.2 3 months ago 29 days ago
protobufjs protobufjs: Memory amplification from preserved unknown fields in binary decode Medium Risk 5.3 3 months ago 29 days ago
protobufjs protobufjs : Schema-derived names can shadow runtime-significant properties Medium Risk 5.3 3 months ago 29 days ago
protobufjs-cli protobufjs : Schema-derived names can shadow runtime-significant properties Medium Risk 5.3 3 months ago 29 days ago
protobufjs protobuf.js: Code generation gadget after prototype pollution High Risk 8.1 4 months ago 29 days ago
protobufjs-cli protobuf.js is Vulnerable to OS Command Injection in the CLI High Risk 7.8 4 months ago 29 days ago
protobufjs protobuf.js: Prototype injection in generated message constructors Medium Risk 5.3 4 months ago 29 days ago
protobufjs protobuf.js: Code injection through bytes field defaults in generated toObject code High Risk 8.0 4 months ago 29 days ago
protobufjs protobuf.js: Denial of service through unbounded protobuf recursion High Risk 7.5 4 months ago 29 days ago
protobufjs-cli protobuf.js: Code injection in pbjs static output from crafted schema names High Risk 8.7 4 months ago 29 days ago
protobufjs Arbitrary code execution in protobufjs Critical 9.8 5 months ago 29 days ago
protobuf protobuf affected by a JSON recursion depth bypass High Risk 8.0 8 months ago 29 days ago
protobuf protobuf-python has a potential Denial of Service issue High Risk 8.0 1 year ago 29 days ago
com.google.protobuf:protobuf-java protobuf-java has potential Denial of Service issue High Risk 7.5 2 years ago 29 days ago
com.google.protobuf:protobuf-javalite protobuf-java has potential Denial of Service issue High Risk 7.5 2 years ago 29 days ago
com.google.protobuf:protobuf-kotlin protobuf-java has potential Denial of Service issue High Risk 7.5 2 years ago 29 days ago
com.google.protobuf:protobuf-kotlin-lite protobuf-java has potential Denial of Service issue High Risk 7.5 2 years ago 29 days ago
google-protobuf protobuf-java has potential Denial of Service issue High Risk 7.5 2 years ago 29 days ago
protobufjs protobufjs: Denial of Service via infinite loop in .proto option parsing Medium Risk 5.3 2 months ago 29 days ago
protobufjs protobufjs: Text Format string map parsing can mutate returned map object prototype Medium Risk 4.8 2 months ago 29 days ago
protobuf Crash due to uncontrolled recursion in protobuf crate Medium Risk 6.0 1 year ago 29 days ago
google.golang.org/protobuf Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON High Risk 7.5 2 years ago 29 days ago
google.golang.org/protobuf/encoding/protojson Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON High Risk 7.5 2 years ago 29 days ago
google.golang.org/protobuf/internal/encoding/json Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON High Risk 7.5 2 years ago 29 days ago
io.grpc:grpc-protobuf gRPC connection termination issue Medium Risk 5.3 3 years ago 29 days ago
io.grpc:grpc-protobuf Connection confusion in gRPC High Risk 7.4 3 years ago 29 days ago
com.google.protobuf:protobuf-java Protobuf Java vulnerable to Uncontrolled Resource Consumption High Risk 7.5 3 years ago 29 days ago
com.google.protobuf:protobuf-javalite Protobuf Java vulnerable to Uncontrolled Resource Consumption High Risk 7.5 3 years ago 29 days ago
com.google.protobuf:protobuf-java Protobuf Java vulnerable to Uncontrolled Resource Consumption High Risk 7.5 3 years ago 29 days ago
com.google.protobuf:protobuf-javalite Protobuf Java vulnerable to Uncontrolled Resource Consumption High Risk 7.5 3 years ago 29 days ago
io.grpc:grpc-protobuf gRPC Reachable Assertion issue High Risk 7.5 3 years ago 29 days ago
google.golang.org/protobuf google.golang.org/protobuf vulnerable to panic leading to denial of service High Risk 7.5 3 years ago 29 days ago
com.google.protobuf:protobuf-java protobuf-java has a potential Denial of Service issue Medium Risk 5.7 4 years ago 29 days ago
com.google.protobuf:protobuf-javalite protobuf-java has a potential Denial of Service issue Medium Risk 5.7 4 years ago 29 days ago
com.google.protobuf:protobuf-kotlin protobuf-java has a potential Denial of Service issue Medium Risk 5.7 4 years ago 29 days ago
com.google.protobuf:protobuf-kotlin-lite protobuf-java has a potential Denial of Service issue Medium Risk 5.7 4 years ago 29 days ago
google-protobuf protobuf-java has a potential Denial of Service issue Medium Risk 5.7 4 years ago 29 days ago
github.com/gogo/protobuf Improper Input Validation in GoGo Protobuf High Risk 8.6 4 years ago 29 days ago
com.google.protobuf:protobuf-java A potential Denial of Service issue in protobuf-java High Risk 7.5 4 years ago 29 days ago
com.google.protobuf:protobuf-kotlin A potential Denial of Service issue in protobuf-java High Risk 7.5 4 years ago 29 days ago
google-protobuf A potential Denial of Service issue in protobuf-java High Risk 7.5 4 years ago 29 days ago
protobufjs protobufjs Prototype Pollution vulnerability Critical 9.8 3 years ago 2 months ago
protobuf Protobuf: Unbounded recursion depth in embedded-message decoding High Risk 8.0 2 months ago 2 months ago