Skip to content
OpenAdvisories

Package · Maven

com.google.protobuf:protobuf-java

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2022-3509 Public exploit

    Parsing issue in protobuf textformat

    A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages wit…

    Google Protocolbuffers protobuf protobuf Debian Ubuntu Maven
  • High 7.5
    CVE-2021-22569 Public exploit

    Denial of Service of protobuf-java parsing procedure

    An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived o…

    Google protobuf-kotlin protobuf-java google-protobuf [JRuby Gem] Debian Ubuntu Maven RubyGems