CVE-2026-0994High· 7.5▾ MidnightPoC availableA denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth ac…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 41.3 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Jul 4.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.6%
1 GitHub repo
0.6% → 0.7%
A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.
Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.
protobuf <= 33.4Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
protobuf >= 6.30.0rc1, < 6.33.5protobuf < 5.29.6Patched in:
protobuf 6.33.5protobuf 5.29.6Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-4565Highprotobuf-python has a potential Denial of Service issue
CVE-2022-1941High· 7.5protobuf-cpp and protobuf-python have potential Denial of Service issue
CVE-2026-54451High· 8.2Elixir protobuf is a pure Elixir implementation of Google Protobuf
CVE-2026-89418High· 8.7google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields
CVE-2026-19201Medium· 6.6An uncontrolled recursion vulnerability in the Windows SIPA event log parser of Google go-attestation versions up to and including 0.6.1 allows an attacker to cause a denial of service (DoS)
CVE-2021-45105Medium· 5.9Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups