Known Vulnerabilities for Protobuf by Elixir-protobuf
Listed below are 10 of the newest known vulnerabilities associated with "Protobuf" by "Elixir-protobuf".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-115919 json | Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to 1.22.0, RNNShapeInfer... | Not Provided | 2026-10-26 | 2026-10-26 |
| CVE-2026-111762 json | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, RestHandler.parseRequestBody ... | Not Provided | 2026-10-20 | 2026-10-28 |
| CVE-2026-110747 json | ProtobufParser._readStringKey() reads the length prefix of a protobuf map entry's string key into an attacker-controlled int ... | Not Provided | 2026-10-28 | 2026-11-06 |
| CVE-2026-107377 json | datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.81.0, an attacker-controll... | Not Provided | 2026-10-08 | 2026-10-14 |
| CVE-2026-106554 json | One CBOR-parsing issue in jackson-dataformats-binary's CBOR module: an unbounded run of CBOR tags drives quadratic-time TagLi... | Not Provided | 2026-11-04 | 2026-11-10 |
| CVE-2026-104635 json | Uncontrolled Recursion vulnerability in Protobuf.JSON.Decode in elixir-protobuf protobuf allows an unauthenticated remote att... | Not Provided | 2026-10-09 | 2026-10-15 |
| CVE-2026-104016 json | ProtobufParser parses length-prefixed protobuf string and bytes fields by checking (_inputPtr + len) <= _inputEnd and then, o... | Not Provided | 2026-10-28 | 2026-11-04 |
| CVE-2026-101086 json | Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing authenti... | Not Provided | 2026-09-27 | 2026-09-28 |
| CVE-2026-89418 json | google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small craf... | Not Provided | 2026-09-17 | 2026-09-17 |
| CVE-2026-87857 json | Temporal Server does not bind a workflow-history pagination token to the namespace and workflow named in the request that pre... | Not Provided | 2026-11-09 | 2026-11-09 |