Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

protobuf

5 known vulnerabilities (3 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 3 high, 1 medium
Weekly downloads
178.6M
Dependents
40.7K
Registry
PyPI

Advisories 5

  • Denial of Service in Python Protobuf

    Affected: from 6.30.0rc1, fixed in 6.33.5; fixed in 5.29.6; fixed in 5.29.6; from 6.30.0rc1, fixed in 6.33.5.

  • Unbounded recursion in Python Protobuf

    Affected: fixed in 4.25.8; from 5.26.0rc1, fixed in 5.29.5; from 6.30.0rc1, fixed in 6.31.1; fixed in 4.25.8; from 5.26.0rc1, fixed in 5.29.5; from 6.30.0rc1, fixed in 6.31.1.

  • Out of Memory issue in ProtocolBuffers for cpp and python

    Affected: fixed in 3.18.3; from 3.19.0, fixed in 3.19.5; from 3.20.0, fixed in 3.20.2; from 4.0.0, fixed in 4.21.6; fixed in 3.18.3; from 3.19.0, fixed in 3.19.5; from 3.20.0, fixed in 3.20.2; from 4.0.0, fixed in 4.21.6.

  • CVE-2021-22570Medium 6.5

    Nullptr Dereference in Protobuf

    Affected: fixed in 3.15.0.

  • protobuf allows remote authenticated attackers to cause a heap-based buffer overflow.

    Affected: fixed in 3.4.0.