google.golang.org/protobuf/encoding/protojson vulnerabilities

CVEs whose affected-version data names the google.golang.org/protobuf/encoding/protojson package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-24786High· 7.5

2y ago

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptio…

▾ Twilightgoogle.golang.org/protobuf · google.golang.org/protobuf/encoding/protojsonEPSS 1.3%via NVD