Known Vulnerabilities for Google-protobuf by Google
Listed below are 2 of the newest known vulnerabilities associated with "Google-protobuf" by "Google".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-89418 json | google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small craf... | Not Provided | 2026-09-17 | 2026-09-17 |
| CVE-2026-54451 json | Elixir protobuf is a pure Elixir implementation of Google Protobuf. From 0.8.0 until 0.16.1, services that decode attacker-co... | Not Provided | 2026-09-17 | 2026-09-21 |
| CVE-2026-0994 json | A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_... | Not Provided | 2026-01-23 | 2026-09-01 |
| CVE-2024-24786 json | The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition c... | Not Provided | 2024-03-05 | 2026-09-23 |
| CVE-2022-3171 json | A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead ... | 7.5 - HIGH | 2022-10-12 | 2023-11-07 |
| CVE-2021-22569 json | An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be ... | 5.5 - MEDIUM | 2022-01-10 | 2023-04-18 |