Skip to main content
cve.nowby Sazabi
← crates.io
crates.ioPackage

protobuf

2 known vulnerabilities (1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 medium
Registry
crates.io

Advisories 2

  • CVE-2025-53605Medium 5.9

    The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::coded_input_stream::CodedInputStream::skip_group…

    Affected: fixed in 3.7.2; fixed in 3.7.2.

  • An issue was discovered in the protobuf crate before 2.6.0 for Rust.

    Affected: fixed in 1.7.5; from 2.0.0-0, fixed in 2.6.0; fixed in 2.6.0.