cve.nowby Sazabi

GoPackage

google.golang.org/protobuf

2 known vulnerabilities (2 high), with the versions each affects and the releases that fix them.

Latest release: Not known: cve.now hasn't read this package's releases
Newest unaffected release: Not known without release data
Advisories: 2 · 2 high

Registry: pkg.go.dev

Advisories 2

CVE-2024-24786High 7.5
Infinite loop in JSON unmarshaling in google.golang.org/protobuf
Affected: fixed in 1.33.0.
CVE-2023-24535High 7.5
Panic when parsing invalid messages in google.golang.org/protobuf
Affected: from 1.29.0, fixed in 1.29.1.