PR
Product
Protobuf-kotlin-lite
2
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add Protobuf-kotlin-lite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-7254 | 7.5 | Sep 19 | Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e Affected: before 3.25.5; 4.0.0 before 4.27.5; 4.28.0 through 4.28.2 |
| CVE-2022-3171 | 7.5 | Oct 12 | Memory handling vulnerability in ProtocolBuffers Java core and lite Affected: before 3.16.3; 3.17.0 before 3.19.6; 3.20.0 before 3.20.3; 3.21.0 before 3.21.7 |
Showing 2