Login Request a demo
PR
Product
Protobuf-kotlin
by Google · last CVE Sep 19, 2024
3
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 2Medium 1Low 0
Severity
All severities3Critical0High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Protobuf-kotlin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-7254
7.5
3%
Sep 19
Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e
Affected: before 3.25.5; 4.0.0 before 4.27.5; 4.28.0 before 4.28.2
CVE-2022-3171
7.5
1%
Oct 12
Memory handling vulnerability in ProtocolBuffers Java core and lite
Affected: before 3.16.3; 3.17.0 before 3.19.6; 3.20.0 before 3.20.3; 3.21.0 before 3.21.7
CVE-2021-22569
5.5
2%
Jan 10
An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order
Affected: before 3.18.2; 3.19.0 before 3.19.2
Showing 3