Skip to content
OpenAdvisories

Vendor

elixir-protobuf

2 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • High 8.2

    Uncontrolled recursion in elixir-protobuf/protobuf JSON decoding of self-referential messages

    Uncontrolled Recursion vulnerability in Protobuf.JSON.Decode in elixir-protobuf protobuf allows an unauthenticated remote attacker to crash the decoding process via a deeply nested JSON document. Any application that decodes attacker-supplied JSON with Protob…

  • High 8.2

    Elixir protobuf: Unbounded recursion depth in embedded-message decoding

    Elixir protobuf is a pure Elixir implementation of Google Protobuf. From 0.8.0 until 0.16.1, services that decode attacker-controlled protobuf bytes with Protobuf.Decoder can be taken offline when the schema contains a self-referential or cyclic message type.…