Skip to content
OpenAdvisories

Package · Hex

protobuf

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2026-104635

    Uncontrolled recursion in elixir-protobuf/protobuf JSON decoding of self-referential messages

    Uncontrolled Recursion vulnerability in Protobuf.JSON.Decode in elixir-protobuf protobuf allows an unauthenticated remote attacker to crash the decoding process via a deeply nested JSON document. Any application that decodes attacker-supplied JSON with Protob…

    elixir-protobuf protobuf protobuf Hex
  • High 8.2
    CVE-2026-54451

    Elixir protobuf: Unbounded recursion depth in embedded-message decoding

    Elixir protobuf is a pure Elixir implementation of Google Protobuf. From 0.8.0 until 0.16.1, services that decode attacker-controlled protobuf bytes with Protobuf.Decoder can be taken offline when the schema contains a self-referential or cyclic message type.…

    elixir-protobuf protobuf elixir protobuf Ubuntu Hex