{"id":"CVE-2024-7254","aliases":["BELL-CVE-2024-7254","CLSA-2025-1756080325","CLSA-2025-1757017511","CLSA-2025-1762906010","CLSA-2026-1774398095","CLSA-2026-1779410884","CLSA-2026-1780966321","CLSA-2026-1787934757","CLSA-2026-1792011714","CLSA-2026-1792011894","CLSA-2026-1792016334","CLSA-2026-1792049845","CLSA-2026-1792049928","CLSA-2026-1792050076","CLSA-2026-1792050084","CLSA-2026-1793122706","DEBIAN-CVE-2024-7254","EUVD-2024-2741","GHSA-735f-pc8j-v9w8","OESA-2025-1144","RHLW-2026-0f944e70846e7603","RHLW-2026-26042322a4c88b7d","RHLW-2026-5eb0cb8050278db4","RHLW-2026-c9a2c76071c97e3c","RHLW-2026-dbe0b911151fb6dd","RHSA-2025:20052","RHSA-2026:4915","RHSA-2026:4916","RHSA-2026:4917","ROOT-APP-MAVEN-CVE-2024-7254","ROOT-OS-ALPINE-320-CVE-2024-7254","SUSE-SU-2024:3745-1","SUSE-SU-2024:3746-1","SUSE-SU-2024:3747-1","SUSE-SU-2025:20074-1","SUSE-SU-2025:20672-1","UBUNTU-CVE-2024-7254","USN-7435-1","USN-7629-1","USN-7629-2","openSUSE-SU-2025:14832-1"],"status":"published","title":"Stack overflow in Protocol Buffers Java Lite","description":"Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsParser or Java Protobuf Lite parser, or against Protobuf map fields, creates unbounded recursions that can be abused by an attacker.","severity":{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.02772,"percentile":0.86433,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20","CWE-400","CWE-674","CWE-787"],"published":"2024-09-19T00:18:45Z","modified":"2026-11-02T19:46:32Z","fixes":[{"ecosystem":"Maven","package":"com.google.protobuf:protobuf-java","fixed_in":["3.25.5","4.27.5","4.28.2"],"sources":["ghsa","osv"]},{"ecosystem":"Maven","package":"com.google.protobuf:protobuf-javalite","fixed_in":["3.25.5","4.27.5","4.28.2"],"sources":["ghsa","osv"]},{"ecosystem":"Maven","package":"com.google.protobuf:protobuf-kotlin","fixed_in":["3.25.5","4.27.5","4.28.2"],"sources":["ghsa","osv"]},{"ecosystem":"Maven","package":"com.google.protobuf:protobuf-kotlin-lite","fixed_in":["3.25.5","4.27.5","4.28.2"],"sources":["ghsa","osv"]},{"ecosystem":"RubyGems","package":"google-protobuf","fixed_in":["3.25.5","4.27.5","4.28.2"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf","fixed_in":["3.14.0-13.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-compiler","fixed_in":["3.14.0-13.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-devel","fixed_in":["3.14.0-13.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-emacs","fixed_in":["3.14.0-13.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-lite","fixed_in":["3.14.0-13.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-lite-devel","fixed_in":["3.14.0-13.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-lite-static","fixed_in":["3.14.0-13.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-static","fixed_in":["3.14.0-13.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-vim","fixed_in":["3.14.0-13.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-protobuf","fixed_in":["3.14.0-13.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-java","fixed_in":["3.21.1-tuxcare.1","3.21.9-tuxcare.2","3.19.6-tuxcare.1","3.21.12-tuxcare.1","3.21.7-tuxcare.1"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-javalite","fixed_in":["3.21.1-tuxcare.1","3.21.9-tuxcare.2","3.19.6-tuxcare.1","3.21.12-tuxcare.1","3.21.7-tuxcare.1"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-kotlin","fixed_in":["3.21.1-tuxcare.1","3.21.9-tuxcare.2","3.19.6-tuxcare.1","3.21.12-tuxcare.1","3.21.7-tuxcare.1"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-kotlin-lite","fixed_in":["3.21.1-tuxcare.1","3.21.9-tuxcare.2","3.19.6-tuxcare.1","3.21.12-tuxcare.1","3.21.7-tuxcare.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"protobuf","fixed_in":["3.21.12-3+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"protobuf","fixed_in":["3.21.12-11+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"protobuf","fixed_in":["3.21.12-12"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"protobuf","fixed_in":["25.1-7.oe2403"],"sources":["osv"]},{"ecosystem":"Red Hat Lightwell:Maven","package":"com.google.protobuf:protobuf-kotlin","fixed_in":["3.21.7.rhlw-00002"],"sources":["osv"]},{"ecosystem":"Red Hat Lightwell:Maven","package":"com.google.protobuf:protobuf-java-util","fixed_in":["3.21.7.rhlw-00002"],"sources":["osv"]},{"ecosystem":"Red Hat Lightwell:Maven","package":"com.google.protobuf:protobuf-kotlin-lite","fixed_in":["3.21.7.rhlw-00002"],"sources":["osv"]},{"ecosystem":"Red Hat Lightwell:Maven","package":"com.google.protobuf:protobuf-java","fixed_in":["3.21.7.rhlw-00002"],"sources":["osv"]},{"ecosystem":"Red Hat Lightwell:Maven","package":"com.google.protobuf:protobuf-javalite","fixed_in":["3.21.7.rhlw-00002"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-protostream","fixed_in":["0:4.3.7-1.Final_redhat_00001.1.el7eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly","fixed_in":["0:7.4.23-5.GA_redhat_00004.1.el7eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-java-jdk11","fixed_in":["0:7.4.23-5.GA_redhat_00004.1.el7eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-java-jdk8","fixed_in":["0:7.4.23-5.GA_redhat_00004.1.el7eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-javadocs","fixed_in":["0:7.4.23-5.GA_redhat_00004.1.el7eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-modules","fixed_in":["0:7.4.23-5.GA_redhat_00004.1.el7eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-protostream","fixed_in":["0:4.3.7-1.Final_redhat_00001.1.el8eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly","fixed_in":["0:7.4.23-5.GA_redhat_00004.1.el8eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-java-jdk11","fixed_in":["0:7.4.23-5.GA_redhat_00004.1.el8eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-java-jdk17","fixed_in":["0:7.4.23-5.GA_redhat_00004.1.el8eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-java-jdk8","fixed_in":["0:7.4.23-5.GA_redhat_00004.1.el8eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-javadocs","fixed_in":["0:7.4.23-5.GA_redhat_00004.1.el8eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-modules","fixed_in":["0:7.4.23-5.GA_redhat_00004.1.el8eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-protostream","fixed_in":["0:4.3.7-1.Final_redhat_00001.1.el9eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly","fixed_in":["0:7.4.23-5.GA_redhat_00004.1.el9eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-java-jdk11","fixed_in":["0:7.4.23-5.GA_redhat_00004.1.el9eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-java-jdk17","fixed_in":["0:7.4.23-5.GA_redhat_00004.1.el9eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-java-jdk8","fixed_in":["0:7.4.23-5.GA_redhat_00004.1.el9eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-javadocs","fixed_in":["0:7.4.23-5.GA_redhat_00004.1.el9eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-modules","fixed_in":["0:7.4.23-5.GA_redhat_00004.1.el9eap"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"com.google.protobuf:protobuf-java","fixed_in":["3.21.12-aikido.1","3.21.7-aikido.1","3.24.4-aikido.1","3.21.12-aikido.2","3.22.3-aikido.1","3.5.1-aikido.1","3.24.4-aikido.2","3.21.1-aikido.1","3.19.3-aikido.1","3.21.1-aikido.2","3.22.3-aikido.2","3.19.3-aikido.2","3.21.7-aikido.2","3.5.1-aikido.2","3.21.12-aikido.3","3.24.4-aikido.3"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.com.google.protobuf:protobuf-java","fixed_in":["3.21.12-root.io.1","3.21.7-root.io.1","3.24.4-root.io.1","3.21.12-root.io.2","3.22.3-root.io.1","3.5.1-root.io.1","3.24.4-root.io.2","3.21.1-root.io.1","3.19.3-root.io.1","3.21.1-root.io.2","3.22.3-root.io.2","3.19.3-root.io.2","3.21.7-root.io.2","3.5.1-root.io.2","3.21.12-root.io.3","3.24.4-root.io.3"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.20","package":"rootio-protobuf","fixed_in":["24.4-r10071"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"protobuf","fixed_in":["25.1-150600.16.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"protobuf","fixed_in":["25.1-150600.16.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"protobuf","fixed_in":["25.1-150600.16.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP6","package":"protobuf","fixed_in":["25.1-150600.16.7.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"protobuf","fixed_in":["25.1-150600.16.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP4","package":"protobuf","fixed_in":["25.1-150400.9.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"protobuf","fixed_in":["25.1-150400.9.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"protobuf","fixed_in":["25.1-150400.9.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"protobuf","fixed_in":["25.1-150400.9.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"protobuf","fixed_in":["25.1-150400.9.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"protobuf","fixed_in":["25.1-150400.9.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"protobuf","fixed_in":["25.1-150400.9.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"protobuf","fixed_in":["25.1-150400.9.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"protobuf","fixed_in":["25.1-150400.9.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP5","package":"protobuf","fixed_in":["25.1-150500.12.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"protobuf","fixed_in":["25.1-150500.12.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"protobuf","fixed_in":["25.1-150500.12.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"protobuf","fixed_in":["25.1-150500.12.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"protobuf","fixed_in":["25.1-150500.12.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"protobuf","fixed_in":["25.1-150500.12.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP5","package":"protobuf","fixed_in":["25.1-150500.12.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.5","package":"protobuf","fixed_in":["25.1-150500.12.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"protobuf","fixed_in":["25.1-150500.12.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"protobuf","fixed_in":["23.4-8.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"protobuf","fixed_in":["2.6.1-1.3ubuntu0.1~esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"protobuf","fixed_in":["3.0.0-9.1ubuntu1.1+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"protobuf","fixed_in":["3.6.1.3-2ubuntu5.2+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"protobuf","fixed_in":["3.12.4-1ubuntu7.22.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"protobuf","fixed_in":["3.21.12-8.2ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"protobuf","fixed_in":["28.3-15.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"com.google.protobuf:protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.25.5"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.google.protobuf:protobuf-javalite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.25.5"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.google.protobuf:protobuf-kotlin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.25.5"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.google.protobuf:protobuf-kotlin-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.25.5"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"google-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.25.5"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"google-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.rc.1"},{"fixed":"4.27.5"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"google-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.28.0.rc.1"},{"fixed":"4.28.2"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.google.protobuf:protobuf-kotlin-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0-RC1"},{"fixed":"4.27.5"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.google.protobuf:protobuf-kotlin-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.28.0-RC1"},{"fixed":"4.28.2"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.google.protobuf:protobuf-kotlin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0-RC1"},{"fixed":"4.27.5"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.google.protobuf:protobuf-kotlin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.28.0-RC1"},{"fixed":"4.28.2"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.google.protobuf:protobuf-javalite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0-RC1"},{"fixed":"4.27.5"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.google.protobuf:protobuf-javalite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.28.0-RC1"},{"fixed":"4.28.2"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.google.protobuf:protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0-RC1"},{"fixed":"4.27.5"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.google.protobuf:protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.28.0-RC1"},{"fixed":"4.28.2"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.21.9-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.21.12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.21.12-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.5.0"},{"fixed":"2.5.0-tuxcare.1"}]}],"versions":["2.5.0"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-13.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-13.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-13.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-13.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-13.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-13.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-lite-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-13.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-13.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-13.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-13.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.1"},{"fixed":"2.6.1-tuxcare.1"}]}],"versions":["2.6.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.21.1"},{"fixed":"3.21.1-tuxcare.1"}]}],"versions":["3.21.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-javalite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.21.1"},{"fixed":"3.21.1-tuxcare.1"}]}],"versions":["3.21.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-kotlin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.21.1"},{"fixed":"3.21.1-tuxcare.1"}]}],"versions":["3.21.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-kotlin-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.21.1"},{"fixed":"3.21.1-tuxcare.1"}]}],"versions":["3.21.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.21.9"},{"fixed":"3.21.9-tuxcare.2"}]}],"versions":["3.21.9","3.21.9-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-javalite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.21.9"},{"fixed":"3.21.9-tuxcare.2"}]}],"versions":["3.21.9","3.21.9-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-kotlin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.21.9"},{"fixed":"3.21.9-tuxcare.2"}]}],"versions":["3.21.9","3.21.9-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-kotlin-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.21.9"},{"fixed":"3.21.9-tuxcare.2"}]}],"versions":["3.21.9","3.21.9-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.19.6"},{"fixed":"3.19.6-tuxcare.1"}]}],"versions":["3.19.6"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-javalite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.19.6"},{"fixed":"3.19.6-tuxcare.1"}]}],"versions":["3.19.6"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-kotlin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.19.6"},{"fixed":"3.19.6-tuxcare.1"}]}],"versions":["3.19.6"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-kotlin-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.19.6"},{"fixed":"3.19.6-tuxcare.1"}]}],"versions":["3.19.6"]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libprotobuf-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-9.1ubuntu1.1+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libprotobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-9.1ubuntu1.1+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libprotobuf-lite10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-9.1ubuntu1.1+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libprotobuf10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-9.1ubuntu1.1+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libprotoc-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-9.1ubuntu1.1+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libprotoc10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-9.1ubuntu1.1+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"protobuf-compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-9.1ubuntu1.1+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-9.1ubuntu1.1+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-9.1ubuntu1.1+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.7.1"},{"fixed":"3.7.1-tuxcare.1"}]}],"versions":["3.7.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.1"},{"fixed":"3.6.1-tuxcare.1"}]}],"versions":["3.6.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.21.12"},{"fixed":"3.21.12-tuxcare.1"}]}],"versions":["3.21.12"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-javalite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.21.12"},{"fixed":"3.21.12-tuxcare.1"}]}],"versions":["3.21.12"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-kotlin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.21.12"},{"fixed":"3.21.12-tuxcare.1"}]}],"versions":["3.21.12"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-kotlin-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.21.12"},{"fixed":"3.21.12-tuxcare.1"}]}],"versions":["3.21.12"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.0"},{"fixed":"3.12.0-tuxcare.1"}]}],"versions":["3.12.0"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-javalite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.0"},{"fixed":"3.12.0-tuxcare.1"}]}],"versions":["3.12.0"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.16.1"},{"fixed":"3.16.1-tuxcare.1"}]}],"versions":["3.16.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-javalite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.16.1"},{"fixed":"3.16.1-tuxcare.1"}]}],"versions":["3.16.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.21.7"},{"fixed":"3.21.7-tuxcare.1"}]}],"versions":["3.21.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-javalite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.21.7"},{"fixed":"3.21.7-tuxcare.1"}]}],"versions":["3.21.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-kotlin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.21.7"},{"fixed":"3.21.7-tuxcare.1"}]}],"versions":["3.21.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-kotlin-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.21.7"},{"fixed":"3.21.7-tuxcare.1"}]}],"versions":["3.21.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.19.2"},{"fixed":"3.19.2-tuxcare.1"}]}],"versions":["3.19.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-javalite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.19.2"},{"fixed":"3.19.2-tuxcare.1"}]}],"versions":["3.19.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-kotlin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.19.2"},{"fixed":"3.19.2-tuxcare.1"}]}],"versions":["3.19.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-kotlin-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.19.2"},{"fixed":"3.19.2-tuxcare.1"}]}],"versions":["3.19.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.2"},{"fixed":"3.12.2-tuxcare.1"}]}],"versions":["3.12.2"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.protobuf:protobuf-javalite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.2"},{"fixed":"3.12.2-tuxcare.1"}]}],"versions":["3.12.2"],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.12-3+deb12u1"}]}],"versions":["3.21.12-3"]},{"source":"osv","ecosystem":"Debian:13","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.12-11+deb13u1"}]}],"versions":["3.21.12-11"]},{"source":"osv","ecosystem":"Debian:14","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.12-12"}]}],"versions":["3.21.12-11"]},{"source":"osv","ecosystem":"Maven","package":"com.google.protobuf:protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.25.5"}]}],"versions":["2.0.1","2.0.3","2.1.0","2.2.0","2.3.0","2.4.0a","2.4.1","2.5.0","2.6.0","2.6.1","3.0.0","3.0.0-alpha-2","3.0.0-alpha-3","3.0.0-alpha-3.1","3.0.0-beta-1","3.0.0-beta-2","3.0.0-beta-3","3.0.0-beta-4","3.0.2","3.1.0","3.10.0","3.10.0-rc-1","3.11.0","3.11.0-rc-1","3.11.0-rc-2","3.11.1","3.11.3","3.11.4","3.12.0","3.12.0-rc-1","3.12.0-rc-2","3.12.1","3.12.2","3.12.4","3.13.0","3.13.0-rc-3","3.14.0","3.14.0-rc-1","3.14.0-rc-2","3.14.0-rc-3","3.15.0","3.15.0-rc-1","3.15.0-rc-2","3.15.1","3.15.2","3.15.3","3.15.4","3.15.5","3.15.6","3.15.7","3.15.8","3.16.0","3.16.0-rc-1","3.16.0-rc-2","3.16.1","3.16.3","3.17.0","3.17.0-rc-1","3.17.0-rc-2","3.17.1","3.17.2","3.17.3","3.18.0","3.18.0-rc-1","3.18.0-rc-2","3.18.1","3.18.2","3.18.3","3.19.0","3.19.0-rc-1","3.19.0-rc-2","3.19.1","3.19.2","3.19.3","3.19.4","3.19.5","3.19.6","3.2.0","3.2.0-rc.1","3.2.0rc2","3.20.0","3.20.0-rc-1","3.20.1","3.20.1-rc-1","3.20.2","3.20.3","3.21.0","3.21.0-rc-1","3.21.0-rc-2","3.21.1","3.21.10","3.21.11","3.21.12","3.21.2","3.21.3","3.21.4","3.21.5","3.21.6","3.21.7","3.21.8","3.21.9","3.22.0","3.22.0-RC1","3.22.0-RC3","3.22.1","3.22.2","3.22.3","3.22.4","3.22.5","3.23.0","3.23.0-RC2","3.23.0-RC3","3.23.1","3.23.2","3.23.3","3.23.4","3.24.0","3.24.0-RC1","3.24.0-RC2","3.24.0-RC3","3.24.1","3.24.2","3.24.3","3.24.4","3.25.0","3.25.0-RC1","3.25.0-RC2","3.25.1","3.25.2","3.25.3","3.25.4","3.3.0","3.3.1","3.4.0","3.5.0","3.5.1","3.6.0","3.6.1","3.7.0","3.7.0-rc1","3.7.1","3.8.0","3.8.0-rc-1","3.9.0","3.9.0-rc-1","3.9.1","3.9.2"]},{"source":"osv","ecosystem":"Maven","package":"com.google.protobuf:protobuf-javalite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.25.5"}]}],"versions":["3.10.0","3.10.0-rc-1","3.11.0","3.11.0-rc-1","3.11.0-rc-2","3.11.1","3.11.3","3.11.4","3.12.0","3.12.0-rc-1","3.12.0-rc-2","3.12.1","3.12.2","3.12.4","3.13.0","3.13.0-rc-3","3.14.0","3.14.0-rc-1","3.14.0-rc-2","3.14.0-rc-3","3.15.0","3.15.0-rc-1","3.15.0-rc-2","3.15.1","3.15.2","3.15.3","3.15.4","3.15.5","3.15.6","3.15.7","3.15.8","3.16.0","3.16.0-rc-1","3.16.0-rc-2","3.16.1","3.16.3","3.17.0","3.17.0-rc-1","3.17.0-rc-2","3.17.1","3.17.2","3.17.3","3.18.0","3.18.0-rc-1","3.18.0-rc-2","3.18.1","3.18.2","3.18.3","3.19.0","3.19.0-rc-1","3.19.0-rc-2","3.19.1","3.19.2","3.19.3","3.19.4","3.19.5","3.19.6","3.20.0","3.20.0-rc-1","3.20.1","3.20.1-rc-1","3.20.2","3.20.3","3.21.0","3.21.0-rc-1","3.21.0-rc-2","3.21.1","3.21.10","3.21.11","3.21.12","3.21.2","3.21.3","3.21.4","3.21.5","3.21.6","3.21.7","3.21.8","3.21.9","3.22.0","3.22.0-RC1","3.22.0-RC3","3.22.1","3.22.2","3.22.3","3.22.4","3.22.5","3.23.0","3.23.0-RC2","3.23.0-RC3","3.23.1","3.23.2","3.23.3","3.23.4","3.24.0","3.24.0-RC1","3.24.0-RC2","3.24.0-RC3","3.24.1","3.24.2","3.24.3","3.24.4","3.25.0","3.25.0-RC1","3.25.0-RC2","3.25.1","3.25.2","3.25.3","3.25.4","3.8.0","3.8.0-rc-1","3.9.0","3.9.0-rc-1","3.9.1","3.9.2"]},{"source":"osv","ecosystem":"Maven","package":"com.google.protobuf:protobuf-kotlin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.25.5"}]}],"versions":["3.17.0","3.17.0-rc-2","3.17.1","3.17.2","3.17.3","3.18.0","3.18.0-rc-1","3.18.0-rc-2","3.18.1","3.18.2","3.18.3","3.19.0","3.19.0-rc-1","3.19.0-rc-2","3.19.1","3.19.2","3.19.3","3.19.4","3.19.5","3.19.6","3.20.0","3.20.0-rc-1","3.20.1","3.20.1-rc-1","3.20.2","3.20.3","3.21.0","3.21.0-rc-1","3.21.0-rc-2","3.21.1","3.21.10","3.21.11","3.21.12","3.21.2","3.21.3","3.21.4","3.21.5","3.21.6","3.21.7","3.21.8","3.21.9","3.22.0","3.22.0-RC1","3.22.0-RC3","3.22.1","3.22.2","3.22.3","3.22.4","3.22.5","3.23.0","3.23.0-RC2","3.23.0-RC3","3.23.1","3.23.2","3.23.3","3.23.4","3.24.0","3.24.0-RC1","3.24.0-RC2","3.24.0-RC3","3.24.1","3.24.2","3.24.3","3.24.4","3.25.0","3.25.0-RC1","3.25.0-RC2","3.25.1","3.25.2","3.25.3","3.25.4"]},{"source":"osv","ecosystem":"Maven","package":"com.google.protobuf:protobuf-kotlin-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.25.5"}]}],"versions":["3.17.0","3.17.0-rc-2","3.17.1","3.17.2","3.17.3","3.18.0","3.18.0-rc-1","3.18.0-rc-2","3.18.1","3.18.2","3.18.3","3.19.0","3.19.0-rc-1","3.19.0-rc-2","3.19.1","3.19.2","3.19.3","3.19.4","3.19.5","3.19.6","3.20.0","3.20.0-rc-1","3.20.1","3.20.1-rc-1","3.20.2","3.20.3","3.21.0","3.21.0-rc-1","3.21.0-rc-2","3.21.1","3.21.10","3.21.11","3.21.12","3.21.2","3.21.3","3.21.4","3.21.5","3.21.6","3.21.7","3.21.8","3.21.9","3.22.0","3.22.0-RC1","3.22.0-RC3","3.22.1","3.22.2","3.22.3","3.22.4","3.22.5","3.23.0","3.23.0-RC2","3.23.0-RC3","3.23.1","3.23.2","3.23.3","3.23.4","3.24.0","3.24.0-RC1","3.24.0-RC2","3.24.0-RC3","3.24.1","3.24.2","3.24.3","3.24.4","3.25.0","3.25.0-RC1","3.25.0-RC2","3.25.1","3.25.2","3.25.3","3.25.4"]},{"source":"osv","ecosystem":"RubyGems","package":"google-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.25.5"}]}],"versions":["3.0.0","3.0.0.alpha.1.0","3.0.0.alpha.1.1","3.0.0.alpha.2.0","3.0.0.alpha.3","3.0.0.alpha.3.1.pre","3.0.0.alpha.4.0","3.0.0.alpha.5.0.3","3.0.0.alpha.5.0.4","3.0.0.alpha.5.0.5","3.0.0.alpha.5.0.5.1","3.0.2","3.1.0","3.1.0.0.pre","3.10.0.rc.1","3.10.1","3.11.0","3.11.0.rc.1","3.11.0.rc.2","3.11.1","3.11.2","3.11.3","3.11.4","3.12.0","3.12.0.rc.1","3.12.0.rc.2","3.12.1","3.12.2","3.12.4","3.13.0","3.13.0.rc.3","3.14.0","3.14.0.rc.1","3.14.0.rc.2","3.14.0.rc.3","3.15.0","3.15.0.rc.1","3.15.0.rc.2","3.15.1","3.15.2","3.15.3","3.15.4","3.15.5","3.15.6","3.15.7","3.15.8","3.16.0","3.16.0.rc.1","3.16.0.rc.2","3.17.0","3.17.0.rc.1","3.17.0.rc.2","3.17.1","3.17.2","3.17.3","3.18.0","3.18.0.rc.1","3.18.0.rc.2","3.18.1","3.18.2","3.18.3","3.19.0","3.19.0.rc.1","3.19.0.rc.2","3.19.1","3.19.2","3.19.3","3.19.4","3.19.5","3.19.6","3.2.0","3.2.0.1","3.2.0.2","3.2.1.pre","3.20.0","3.20.0.rc.1","3.20.0.rc.2","3.20.1","3.20.1.rc.1","3.20.2","3.20.3","3.21.0","3.21.0.rc.1","3.21.0.rc.2","3.21.1","3.21.10","3.21.11","3.21.12","3.21.2","3.21.3","3.21.4","3.21.5","3.21.6","3.21.7","3.21.8","3.21.9","3.22.0","3.22.0.rc.2","3.22.0.rc.3","3.22.1","3.22.2","3.22.3","3.22.5","3.23.0","3.23.0.rc.1","3.23.0.rc.2","3.23.0.rc.3","3.23.1","3.23.2","3.23.3","3.23.4","3.24.0","3.24.0.rc.2","3.24.0.rc.3","3.24.1","3.24.2","3.24.3","3.24.4","3.25.0","3.25.0.rc.1","3.25.0.rc.2","3.25.1","3.25.2","3.25.3","3.25.4","3.3.0","3.4.0.1","3.4.0.2","3.4.1.1","3.5.0","3.5.0.pre","3.5.1","3.5.1.1","3.5.1.2","3.6.0","3.6.1","3.7.0","3.7.0.rc.2","3.7.0.rc.3","3.7.1","3.8.0","3.8.0.rc.1","3.9.0","3.9.0.rc.1","3.9.1","3.9.2"]},{"source":"osv","ecosystem":"RubyGems","package":"google-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0.rc.1"},{"fixed":"4.27.5"}]}],"versions":["4.26.0","4.26.0.rc.1","4.26.0.rc.2","4.26.0.rc.3","4.26.1","4.27.0","4.27.0.rc.1","4.27.0.rc.2","4.27.0.rc.3","4.27.1","4.27.2","4.27.3","4.27.4"]},{"source":"osv","ecosystem":"RubyGems","package":"google-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.28.0.rc.1"},{"fixed":"4.28.2"}]}],"versions":["4.28.0","4.28.0.rc.1","4.28.0.rc.2","4.28.0.rc.3","4.28.1"]},{"source":"osv","ecosystem":"Maven","package":"com.google.protobuf:protobuf-kotlin-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0-RC1"},{"fixed":"4.27.5"}]}],"versions":["4.26.0","4.26.0-RC1","4.26.0-RC2","4.26.0-RC3","4.26.1","4.27.0","4.27.0-RC1","4.27.0-RC2","4.27.0-RC3","4.27.1","4.27.2","4.27.3","4.27.4"]},{"source":"osv","ecosystem":"Maven","package":"com.google.protobuf:protobuf-kotlin-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.28.0-RC1"},{"fixed":"4.28.2"}]}],"versions":["4.28.0","4.28.0-RC1","4.28.0-RC2","4.28.0-RC3","4.28.1"]},{"source":"osv","ecosystem":"Maven","package":"com.google.protobuf:protobuf-kotlin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0-RC1"},{"fixed":"4.27.5"}]}],"versions":["4.26.0","4.26.0-RC1","4.26.0-RC2","4.26.0-RC3","4.26.1","4.27.0","4.27.0-RC1","4.27.0-RC2","4.27.0-RC3","4.27.1","4.27.2","4.27.3","4.27.4"]},{"source":"osv","ecosystem":"Maven","package":"com.google.protobuf:protobuf-kotlin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.28.0-RC1"},{"fixed":"4.28.2"}]}],"versions":["4.28.0","4.28.0-RC1","4.28.0-RC2","4.28.0-RC3","4.28.1"]},{"source":"osv","ecosystem":"Maven","package":"com.google.protobuf:protobuf-javalite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0-RC1"},{"fixed":"4.27.5"}]}],"versions":["4.0.0-rc-1","4.0.0-rc-2","4.26.0","4.26.0-RC1","4.26.0-RC2","4.26.0-RC3","4.26.1","4.27.0","4.27.0-RC1","4.27.0-RC2","4.27.0-RC3","4.27.1","4.27.2","4.27.3","4.27.4"]},{"source":"osv","ecosystem":"Maven","package":"com.google.protobuf:protobuf-javalite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.28.0-RC1"},{"fixed":"4.28.2"}]}],"versions":["4.28.0","4.28.0-RC1","4.28.0-RC2","4.28.0-RC3","4.28.1"]},{"source":"osv","ecosystem":"Maven","package":"com.google.protobuf:protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0-RC1"},{"fixed":"4.27.5"}]}],"versions":["4.0.0-rc-1","4.0.0-rc-2","4.26.0","4.26.0-RC1","4.26.0-RC2","4.26.0-RC3","4.26.1","4.27.0","4.27.0-RC1","4.27.0-RC2","4.27.0-RC3","4.27.1","4.27.2","4.27.3","4.27.4"]},{"source":"osv","ecosystem":"Maven","package":"com.google.protobuf:protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.28.0-RC1"},{"fixed":"4.28.2"}]}],"versions":["4.28.0","4.28.0-RC1","4.28.0-RC2","4.28.0-RC3","4.28.1"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-7.oe2403"}]}]},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"com.google.protobuf:protobuf-kotlin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.7.rhlw-00002"}]}],"versions":["3.17.0","3.17.0-rc-2","3.17.1","3.17.2","3.17.3","3.18.0","3.18.0-rc-1","3.18.0-rc-2","3.18.1","3.18.2","3.18.3","3.19.0","3.19.0-rc-1","3.19.0-rc-2","3.19.1","3.19.2","3.19.3","3.19.4","3.19.5","3.19.6","3.20.0","3.20.0-rc-1","3.20.1","3.20.1-rc-1","3.20.2","3.20.3","3.21.0","3.21.0-rc-1","3.21.0-rc-2","3.21.1","3.21.2","3.21.3","3.21.4","3.21.5","3.21.6","3.21.7"]},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"com.google.protobuf:protobuf-java-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.7.rhlw-00002"}]}],"versions":["3.0.0","3.0.0-beta-1","3.0.0-beta-2","3.0.0-beta-3","3.0.0-beta-4","3.0.2","3.1.0","3.10.0","3.10.0-rc-1","3.11.0","3.11.0-rc-1","3.11.0-rc-2","3.11.1","3.11.3","3.11.4","3.12.0","3.12.0-rc-1","3.12.0-rc-2","3.12.1","3.12.2","3.12.4","3.13.0","3.13.0-rc-3","3.14.0","3.14.0-rc-1","3.14.0-rc-2","3.14.0-rc-3","3.15.0","3.15.0-rc-1","3.15.0-rc-2","3.15.1","3.15.2","3.15.3","3.15.4","3.15.5","3.15.6","3.15.7","3.15.8","3.16.0","3.16.0-rc-1","3.16.0-rc-2","3.16.1","3.16.3","3.17.0","3.17.0-rc-1","3.17.0-rc-2","3.17.1","3.17.2","3.17.3","3.18.0","3.18.0-rc-1","3.18.0-rc-2","3.18.1","3.18.2","3.18.3","3.19.0","3.19.0-rc-1","3.19.0-rc-2","3.19.1","3.19.2","3.19.3","3.19.4","3.19.5","3.19.6","3.2.0","3.2.0-rc.1","3.2.0rc2","3.20.0","3.20.0-rc-1","3.20.1","3.20.1-rc-1","3.20.2","3.20.3","3.21.0","3.21.0-rc-1","3.21.0-rc-2","3.21.1","3.21.2","3.21.3","3.21.4","3.21.5","3.21.6","3.21.7","3.3.0","3.3.1","3.4.0","3.5.0","3.5.1","3.6.0","3.6.1","3.7.0","3.7.0-rc1","3.7.1","3.8.0","3.8.0-rc-1","3.9.0","3.9.0-rc-1","3.9.1","3.9.2"]},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"com.google.protobuf:protobuf-kotlin-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.7.rhlw-00002"}]}],"versions":["3.17.0","3.17.0-rc-2","3.17.1","3.17.2","3.17.3","3.18.0","3.18.0-rc-1","3.18.0-rc-2","3.18.1","3.18.2","3.18.3","3.19.0","3.19.0-rc-1","3.19.0-rc-2","3.19.1","3.19.2","3.19.3","3.19.4","3.19.5","3.19.6","3.20.0","3.20.0-rc-1","3.20.1","3.20.1-rc-1","3.20.2","3.20.3","3.21.0","3.21.0-rc-1","3.21.0-rc-2","3.21.1","3.21.2","3.21.3","3.21.4","3.21.5","3.21.6","3.21.7"]},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"com.google.protobuf:protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.7.rhlw-00002"}]}],"versions":["2.0.1","2.0.3","2.1.0","2.2.0","2.3.0","2.4.0a","2.4.1","2.5.0","2.6.0","2.6.1","3.0.0","3.0.0-alpha-2","3.0.0-alpha-3","3.0.0-alpha-3.1","3.0.0-beta-1","3.0.0-beta-2","3.0.0-beta-3","3.0.0-beta-4","3.0.2","3.1.0","3.10.0","3.10.0-rc-1","3.11.0","3.11.0-rc-1","3.11.0-rc-2","3.11.1","3.11.3","3.11.4","3.12.0","3.12.0-rc-1","3.12.0-rc-2","3.12.1","3.12.2","3.12.4","3.13.0","3.13.0-rc-3","3.14.0","3.14.0-rc-1","3.14.0-rc-2","3.14.0-rc-3","3.15.0","3.15.0-rc-1","3.15.0-rc-2","3.15.1","3.15.2","3.15.3","3.15.4","3.15.5","3.15.6","3.15.7","3.15.8","3.16.0","3.16.0-rc-1","3.16.0-rc-2","3.16.1","3.16.3","3.17.0","3.17.0-rc-1","3.17.0-rc-2","3.17.1","3.17.2","3.17.3","3.18.0","3.18.0-rc-1","3.18.0-rc-2","3.18.1","3.18.2","3.18.3","3.19.0","3.19.0-rc-1","3.19.0-rc-2","3.19.1","3.19.2","3.19.3","3.19.4","3.19.5","3.19.6","3.2.0","3.2.0-rc.1","3.2.0rc2","3.20.0","3.20.0-rc-1","3.20.1","3.20.1-rc-1","3.20.2","3.20.3","3.21.0","3.21.0-rc-1","3.21.0-rc-2","3.21.1","3.21.2","3.21.3","3.21.4","3.21.5","3.21.6","3.21.7","3.3.0","3.3.1","3.4.0","3.5.0","3.5.1","3.6.0","3.6.1","3.7.0","3.7.0-rc1","3.7.1","3.8.0","3.8.0-rc-1","3.9.0","3.9.0-rc-1","3.9.1","3.9.2"]},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"com.google.protobuf:protobuf-javalite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.7.rhlw-00002"}]}],"versions":["3.10.0","3.10.0-rc-1","3.11.0","3.11.0-rc-1","3.11.0-rc-2","3.11.1","3.11.3","3.11.4","3.12.0","3.12.0-rc-1","3.12.0-rc-2","3.12.1","3.12.2","3.12.4","3.13.0","3.13.0-rc-3","3.14.0","3.14.0-rc-1","3.14.0-rc-2","3.14.0-rc-3","3.15.0","3.15.0-rc-1","3.15.0-rc-2","3.15.1","3.15.2","3.15.3","3.15.4","3.15.5","3.15.6","3.15.7","3.15.8","3.16.0","3.16.0-rc-1","3.16.0-rc-2","3.16.1","3.16.3","3.17.0","3.17.0-rc-1","3.17.0-rc-2","3.17.1","3.17.2","3.17.3","3.18.0","3.18.0-rc-1","3.18.0-rc-2","3.18.1","3.18.2","3.18.3","3.19.0","3.19.0-rc-1","3.19.0-rc-2","3.19.1","3.19.2","3.19.3","3.19.4","3.19.5","3.19.6","3.20.0","3.20.0-rc-1","3.20.1","3.20.1-rc-1","3.20.2","3.20.3","3.21.0","3.21.0-rc-1","3.21.0-rc-2","3.21.1","3.21.2","3.21.3","3.21.4","3.21.5","3.21.6","3.21.7","3.8.0","3.8.0-rc-1","3.9.0","3.9.0-rc-1","3.9.1","3.9.2"]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-protostream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.7-1.Final_redhat_00001.1.el7eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-5.GA_redhat_00004.1.el7eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-5.GA_redhat_00004.1.el7eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-5.GA_redhat_00004.1.el7eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-5.GA_redhat_00004.1.el7eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-5.GA_redhat_00004.1.el7eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-protostream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.7-1.Final_redhat_00001.1.el8eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-5.GA_redhat_00004.1.el8eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-5.GA_redhat_00004.1.el8eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-5.GA_redhat_00004.1.el8eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-5.GA_redhat_00004.1.el8eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-5.GA_redhat_00004.1.el8eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-5.GA_redhat_00004.1.el8eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-protostream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.7-1.Final_redhat_00001.1.el9eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-5.GA_redhat_00004.1.el9eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-5.GA_redhat_00004.1.el9eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-5.GA_redhat_00004.1.el9eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-5.GA_redhat_00004.1.el9eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-5.GA_redhat_00004.1.el9eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-5.GA_redhat_00004.1.el9eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.39-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-eclipse-jgit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.13.5.202508271544-2.r_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-classes-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.39-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-eclipse-jgit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.13.5.202508271544-2.r_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-classes-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.39-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-eclipse-jgit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.13.5.202508271544-2.r_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-classes-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Root:Maven","package":"com.google.protobuf:protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.12-aikido.1"},{"fixed":"3.21.7-aikido.1"},{"fixed":"3.24.4-aikido.1"},{"fixed":"3.21.12-aikido.2"},{"fixed":"3.22.3-aikido.1"},{"fixed":"3.5.1-aikido.1"},{"fixed":"3.24.4-aikido.2"},{"fixed":"3.21.1-aikido.1"},{"fixed":"3.19.3-aikido.1"},{"fixed":"3.21.1-aikido.2"},{"fixed":"3.22.3-aikido.2"},{"fixed":"3.19.3-aikido.2"},{"fixed":"3.21.7-aikido.2"},{"fixed":"3.5.1-aikido.2"},{"fixed":"3.21.12-aikido.3"},{"fixed":"3.24.4-aikido.3"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.com.google.protobuf:protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.12-root.io.1"},{"fixed":"3.21.7-root.io.1"},{"fixed":"3.24.4-root.io.1"},{"fixed":"3.21.12-root.io.2"},{"fixed":"3.22.3-root.io.1"},{"fixed":"3.5.1-root.io.1"},{"fixed":"3.24.4-root.io.2"},{"fixed":"3.21.1-root.io.1"},{"fixed":"3.19.3-root.io.1"},{"fixed":"3.21.1-root.io.2"},{"fixed":"3.22.3-root.io.2"},{"fixed":"3.19.3-root.io.2"},{"fixed":"3.21.7-root.io.2"},{"fixed":"3.5.1-root.io.2"},{"fixed":"3.21.12-root.io.3"},{"fixed":"3.24.4-root.io.3"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.20","package":"rootio-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.4-r10071"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150600.16.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150600.16.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150600.16.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP6","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150600.16.7.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150600.16.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP4","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150400.9.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150400.9.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150400.9.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150400.9.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150400.9.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150400.9.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150400.9.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150400.9.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150400.9.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP5","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150500.12.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150500.12.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150500.12.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150500.12.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150500.12.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150500.12.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP5","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150500.12.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.5","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150500.12.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150500.12.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.4-8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.4-slfo.1.1_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.1-3ubuntu2","2.4.1-3ubuntu3","2.4.1-3ubuntu4","2.5.0-5ubuntu2","2.5.0-7ubuntu1","2.5.0-8ubuntu1","2.5.0-9ubuntu1","2.5.0-9ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1-1.3ubuntu0.1~esm4"}]}],"versions":["2.6.1-1.2","2.6.1-1.3","2.6.1-1.3ubuntu0.1~esm1","2.6.1-1.3ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-9.1ubuntu1.1+esm3"}]}],"versions":["3.0.0-9ubuntu5","3.0.0-9ubuntu6","3.0.0-9.1ubuntu1","3.0.0-9.1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1.3-2ubuntu5.2+esm2"}]}],"versions":["3.6.1.3-2","3.6.1.3-2ubuntu1","3.6.1.3-2ubuntu3","3.6.1.3-2ubuntu4","3.6.1.3-2ubuntu5","3.6.1.3-2ubuntu5.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.4-1ubuntu7.22.04.2"}]}],"versions":["3.12.4-1ubuntu3","3.12.4-1ubuntu5","3.12.4-1ubuntu6","3.12.4-1ubuntu7","3.12.4-1ubuntu7.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.12-8.2ubuntu0.1"}]}],"versions":["3.21.12-7ubuntu1","3.21.12-8ubuntu1","3.21.12-8ubuntu5","3.21.12-8.2","3.21.12-8.2build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.4-1ubuntu7.22.04.2"}]}],"versions":["3.12.4-1ubuntu3","3.12.4-1ubuntu5","3.12.4-1ubuntu6","3.12.4-1ubuntu7","3.12.4-1ubuntu7.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.12-8.2ubuntu0.1"}]}],"versions":["3.21.12-7ubuntu1","3.21.12-8ubuntu1","3.21.12-8ubuntu5","3.21.12-8.2","3.21.12-8.2build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.4-1ubuntu7.22.04.4"}]}],"versions":["3.12.4-1ubuntu3","3.12.4-1ubuntu5","3.12.4-1ubuntu6","3.12.4-1ubuntu7","3.12.4-1ubuntu7.22.04.1","3.12.4-1ubuntu7.22.04.2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.12-8.2ubuntu0.2"}]}],"versions":["3.21.12-7ubuntu1","3.21.12-8ubuntu1","3.21.12-8ubuntu5","3.21.12-8.2","3.21.12-8.2build1","3.21.12-8.2ubuntu0.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1-1.3ubuntu0.1~esm4"}]}],"versions":["2.6.1-1.2","2.6.1-1.3","2.6.1-1.3ubuntu0.1~esm1","2.6.1-1.3ubuntu0.1~esm2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-9.1ubuntu1.1+esm3"}]}],"versions":["3.0.0-9ubuntu5","3.0.0-9ubuntu6","3.0.0-9.1ubuntu1","3.0.0-9.1ubuntu1.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1.3-2ubuntu5.2+esm2"}]}],"versions":["3.6.1.3-2","3.6.1.3-2ubuntu1","3.6.1.3-2ubuntu3","3.6.1.3-2ubuntu4","3.6.1.3-2ubuntu5","3.6.1.3-2ubuntu5.2"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.3-15.1"}]}]}],"products":[{"vendor":"google","product":"google-protobuf [jruby gem]"},{"vendor":"google","product":"protobuf"},{"vendor":"google","product":"protobuf-java"},{"vendor":"google","product":"protobuf-javalite"},{"vendor":"google","product":"protobuf-kotlin"},{"vendor":"google","product":"protobuf-kotlin-lite"},{"vendor":"google","product":"protobuf-kotllin-lite"},{"vendor":"google","product":"protocol buffers"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"bluexp"},{"vendor":"netapp","product":"ontap_tools"}],"references":[{"url":"https://github.com/protocolbuffers/protobuf/commit/cc8b3483a5584b3301e3d43d17eb59704857ffaa","tags":["Patch","fix","web","article"]},{"url":"https://security.netapp.com/advisory/ntap-20241213-0010/","tags":["Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20250418-0006/","tags":["Third Party Advisory","advisory"]},{"url":"https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-735f-pc8j-v9w8","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7254","tags":["advisory"]},{"url":"https://github.com/protocolbuffers/protobuf/commit/4728531c162f2f9e8c2ca1add713cfee2db6be3b","tags":["web"]},{"url":"https://github.com/protocolbuffers/protobuf/commit/850fcce9176e2c9070614dab53537760498c926b","tags":["web"]},{"url":"https://github.com/protocolbuffers/protobuf/commit/9a5f5fe752a20cbac2e722b06949ac985abdd534","tags":["web"]},{"url":"https://github.com/protocolbuffers/protobuf/commit/ac9fb5b4c71b0dd80985b27684e265d1f03abf46","tags":["web"]},{"url":"https://github.com/protocolbuffers/protobuf/commit/d6c82fc55a76481c676f541a255571e8950bb8c3","tags":["web"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/google-protobuf/CVE-2024-7254.yml","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20241213-0010","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20250418-0006","tags":["web"]},{"url":"https://github.com/advisories/GHSA-735f-pc8j-v9w8","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-7254","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1757017511.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1787934757.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0994","tags":["advisory"]},{"url":"https://mvnrepository.com/artifact/com.google.protobuf/protobuf-java","tags":["web"]},{"url":"https://rubygems.org/gems/google-protobuf","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/7xxx/CVE-2024-7254.json","tags":["advisory"]},{"url":"https://github.com/protocolbuffers/protobuf","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-7254","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1144","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:20052","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2313454","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_20052.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-7254","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-7254","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2026:4915","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2367730","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374804","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2387221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2388252","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2392306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2408784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2427147","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-30074","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4915.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-3884","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-3884","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3884","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-4949","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-4949","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-4949","tags":["advisory"]},{"url":"https://gitlab.eclipse.org/security/cve-assignement/-/issues/64","tags":["article"]},{"url":"https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/281","tags":["article"]},{"url":"https://projects.eclipse.org/projects/technology.jgit/releases/7.2.1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-9784","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-9784","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9784","tags":["advisory"]},{"url":"https://github.com/undertow-io/undertow/pull/1778","tags":["article"]},{"url":"https://github.com/undertow-io/undertow/releases/tag/2.2.38.Final","tags":["article"]},{"url":"https://issues.redhat.com/browse/UNDERTOW-2598","tags":["article"]},{"url":"https://kb.cert.org/vuls/id/767506","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-12543","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-12543","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-12543","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-48913","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-48913","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48913","tags":["advisory"]},{"url":"https://lists.apache.org/thread/f1nv488ztc0js4g5ml2v88mzkzslyh83","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-52999","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-52999","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-52999","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-core/pull/943","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-core/security/advisories/GHSA-h46c-h94j-95f3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-55163","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-55163","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-55163","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-0603","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0603","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0603","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:4916","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-30075","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4916.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:4917","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-30076","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4917.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243745-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1230778","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7254","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243746-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243747-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520074-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520672-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1223947","tags":["report"]},{"url":"https://bugzilla.suse.com/1244663","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4565","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2024-7254","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7435-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7629-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7629-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-4565","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7BXEJJQEIUZ7QDP6FGG4C4FC6S3EERSZ/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-7254","title":"Stack overflow in Protocol Buffers Java Lite","description":"Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsParser or Java Protobuf Lite parser, or against Protobuf map fields, creates unbounded recursions that can be abused by an attacker.","status":"published","published":"2024-09-19T00:18:45.824Z","modified":"2025-09-08T09:37:53.702Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-400","CWE-674"],"updated_at":"2026-11-02T14:34:21.025267Z"}],"euvd":[{"id":"EUVD-2024-2741","description":"Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsParser or Java Protobuf Lite parser, or against Protobuf map fields, creates unbounded recursions that can be abused by an attacker.","status":"published","published":"2024-09-19T00:18:45Z","modified":"2025-09-08T09:37:53Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T20:31:46.507509Z"}],"ghsa":[{"id":"GHSA-735f-pc8j-v9w8","title":"protobuf-java has potential Denial of Service issue","description":"### Summary\nWhen parsing unknown fields in the Protobuf Java Lite and Full library, a maliciously crafted message can cause a StackOverflow error and lead to a program crash.\n\nReporter: Alexis Challande, Trail of Bits Ecosystem Security Team \u003cecosystem@trailofbits.com\u003e\n\nAffected versions: This issue affects all versions of both the Java full and lite Protobuf runtimes, as well as Protobuf for Kotlin and JRuby, which themselves use the Java Protobuf runtime.\n\n### Severity\n[CVE-2024-7254](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7254) **High** CVSS4.0 Score 8.7 (NOTE: there may be a delay in publication)\nThis is a potential Denial of Service. Parsing nested groups as unknown fields with DiscardUnknownFieldsParser or Java Protobuf Lite parser, or against Protobuf map fields, creates unbounded recursions that can be abused by an attacker.\n\n### Proof of Concept\nFor reproduction details, please refer to the unit tests (Protobuf Java [LiteTest](https://github.com/protocolbuffers/protobuf/blob/a037f28ff81ee45ebe008c64ab632bf5372242ce/java/lite/src/test/java/com/google/protobuf/LiteTest.java) and [CodedInputStreamTest](https://github.com/protocolbuffers/protobuf/blob/a037f28ff81ee45ebe008c64ab632bf5372242ce/java/core/src/test/java/com/google/protobuf/CodedInputStreamTest.java)) that identify the specific inputs that exercise this parsing weakness.\n\n### Remediation and Mitigation\nWe have been working diligently to address this issue and have released a mitigation that is available now. Please update to the latest available versions of the following packages:\n* protobuf-java (3.25.5, 4.27.5, 4.28.2)\n* protobuf-javalite (3.25.5, 4.27.5, 4.28.2)\n* protobuf-kotlin (3.25.5, 4.27.5, 4.28.2)\n* protobuf-kotlin-lite (3.25.5, 4.27.5, 4.28.2)\n* com-protobuf [JRuby gem only] (3.25.5, 4.27.5, 4.28.2)","status":"published","published":"2024-09-19T16:06:03Z","modified":"2025-09-10T20:53:05Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20","CWE-400","CWE-787"],"updated_at":"2026-11-02T14:38:57.074217Z"}],"nvd":[{"id":"CVE-2024-7254","description":"Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsParser or Java Protobuf Lite parser, or against Protobuf map fields, creates unbounded recursions that can be abused by an attacker.","status":"published","published":"2024-09-19T01:15:10.963Z","modified":"2026-06-17T08:19:42.557Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-400","CWE-674","CWE-787"],"updated_at":"2026-11-02T14:10:27.456509Z"}],"osv":[{"id":"BELL-CVE-2024-7254","status":"published","published":"2024-09-20T05:56:48.580437Z","modified":"2026-09-06T07:15:12.950011145Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:21.227396Z"},{"id":"CVE-2024-7254","title":"Stack overflow in Protocol Buffers Java Lite","description":"Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsParser or Java Protobuf Lite parser, or against Protobuf map fields, creates unbounded recursions that can be abused by an attacker.","status":"published","published":"2024-09-19T00:18:45.824Z","modified":"2026-10-28T10:42:02.814203985Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-400","CWE-674"],"updated_at":"2026-11-02T15:44:45.405014Z"},{"id":"DEBIAN-CVE-2024-7254","description":"Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsParser or Java Protobuf Lite parser, or against Protobuf map fields, creates unbounded recursions that can be abused by an attacker.","status":"published","published":"2024-09-19T01:15:10.963Z","modified":"2026-11-02T12:03:12.142358603Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:44.747956Z"},{"id":"GHSA-735f-pc8j-v9w8","title":"protobuf-java has potential Denial of Service issue","description":"### Summary\nWhen parsing unknown fields in the Protobuf Java Lite and Full library, a maliciously crafted message can cause a StackOverflow error and lead to a program crash.\n\nReporter: Alexis Challande, Trail of Bits Ecosystem Security Team \u003cecosystem@trailofbits.com\u003e\n\nAffected versions: This issue affects all versions of both the Java full and lite Protobuf runtimes, as well as Protobuf for Kotlin and JRuby, which themselves use the Java Protobuf runtime.\n\n### Severity\n[CVE-2024-7254](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7254) **High** CVSS4.0 Score 8.7 (NOTE: there may be a delay in publication)\nThis is a potential Denial of Service. Parsing nested groups as unknown fields with DiscardUnknownFieldsParser or Java Protobuf Lite parser, or against Protobuf map fields, creates unbounded recursions that can be abused by an attacker.\n\n### Proof of Concept\nFor reproduction details, please refer to the unit tests (Protobuf Java [LiteTest](https://github.com/protocolbuffers/protobuf/blob/a037f28ff81ee45ebe008c64ab632bf5372242ce/java/lite/src/test/java/com/google/protobuf/LiteTest.java) and [CodedInputStreamTest](https://github.com/protocolbuffers/protobuf/blob/a037f28ff81ee45ebe008c64ab632bf5372242ce/java/core/src/test/java/com/google/protobuf/CodedInputStreamTest.java)) that identify the specific inputs that exercise this parsing weakness.\n\n### Remediation and Mitigation\nWe have been working diligently to address this issue and have released a mitigation that is available now. Please update to the latest available versions of the following packages:\n* protobuf-java (3.25.5, 4.27.5, 4.28.2)\n* protobuf-javalite (3.25.5, 4.27.5, 4.28.2)\n* protobuf-kotlin (3.25.5, 4.27.5, 4.28.2)\n* protobuf-kotlin-lite (3.25.5, 4.27.5, 4.28.2)\n* com-protobuf [JRuby gem only] (3.25.5, 4.27.5, 4.28.2)","status":"published","published":"2024-09-19T16:06:03Z","modified":"2026-09-10T03:50:19.212518465Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-20","CWE-400","CWE-787"],"updated_at":"2026-11-02T15:46:40.308826Z"},{"id":"OESA-2025-1144","title":"protobuf security update","description":"Protocol Buffers (a.k.a., protobuf) are Google\u0026amp;apos;s language-neutral, platform-neutral, extensible mechanism for serializing structured data. You can find protobuf\u0026amp;apos;s documentation on the Google Developers site.\r\n\r\nSecurity Fix(es):\n\nAny project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsParser or Java Protobuf Lite parser, or against Protobuf map fields, creates unbounded recursions that can be abused by an attacker.(CVE-2024-7254)","status":"published","published":"2025-02-21T11:08:14Z","modified":"2026-08-18T01:18:47.219032691Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"RHLW-2026-0f944e70846e7603","title":"Lightwell Security Advisory: protobuf-kotlin 3.21.7.rhlw-00002","description":"Red Hat Lightwell has released com.google.protobuf:protobuf-kotlin 3.21.7.rhlw-00002 with a backported security fix.\n\nCVE-2024-7254: Stack overflow in Protocol Buffers Java Lite\n\nThis patched artifact is a drop-in replacement for com.google.protobuf:protobuf-kotlin 3.21.7 from Maven Central.","status":"published","published":"2026-10-12T19:48:43Z","modified":"2026-10-27T04:00:05.439611702Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHLW-2026-26042322a4c88b7d","title":"Lightwell Security Advisory: protobuf-java-util 3.21.7.rhlw-00002","description":"Red Hat Lightwell has released com.google.protobuf:protobuf-java-util 3.21.7.rhlw-00002 with a backported security fix.\n\nCVE-2024-7254: Stack overflow in Protocol Buffers Java Lite\n\nThis patched artifact is a drop-in replacement for com.google.protobuf:protobuf-java-util 3.21.7 from Maven Central.","status":"published","published":"2026-10-08T19:45:13Z","modified":"2026-10-27T04:00:05.542746216Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHLW-2026-5eb0cb8050278db4","title":"Lightwell Security Advisory: protobuf-kotlin-lite 3.21.7.rhlw-00002","description":"Red Hat Lightwell has released com.google.protobuf:protobuf-kotlin-lite 3.21.7.rhlw-00002 with a backported security fix.\n\nCVE-2024-7254: Stack overflow in Protocol Buffers Java Lite\n\nThis patched artifact is a drop-in replacement for com.google.protobuf:protobuf-kotlin-lite 3.21.7 from Maven Central.","status":"published","published":"2026-10-12T19:50:47Z","modified":"2026-10-27T04:00:14.700655965Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHLW-2026-c9a2c76071c97e3c","title":"Lightwell Security Advisory: protobuf-java 3.21.7.rhlw-00002","description":"Red Hat Lightwell has released com.google.protobuf:protobuf-java 3.21.7.rhlw-00002 with a backported security fix.\n\nCVE-2024-7254: Stack overflow in Protocol Buffers Java Lite\n\nThis patched artifact is a drop-in replacement for com.google.protobuf:protobuf-java 3.21.7 from Maven Central.","status":"published","published":"2026-10-08T19:45:12Z","modified":"2026-10-27T04:00:17.861991021Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHLW-2026-dbe0b911151fb6dd","title":"Lightwell Security Advisory: protobuf-javalite 3.21.7.rhlw-00002","description":"Red Hat Lightwell has released com.google.protobuf:protobuf-javalite 3.21.7.rhlw-00002 with a backported security fix.\n\nCVE-2024-7254: Stack overflow in Protocol Buffers Java Lite\n\nThis patched artifact is a drop-in replacement for com.google.protobuf:protobuf-javalite 3.21.7 from Maven Central.","status":"published","published":"2026-10-13T21:10:14Z","modified":"2026-10-27T04:00:19.608604284Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:59.135214Z"},{"id":"RHSA-2025:20052","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 security update","status":"published","published":"2025-11-11T10:07:40Z","modified":"2026-10-20T10:03:24Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2026:4915","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update","status":"published","published":"2026-03-19T10:20:30Z","modified":"2026-10-20T10:10:07Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:4916","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update","status":"published","published":"2026-03-19T10:20:31Z","modified":"2026-10-20T10:10:08Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:4917","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update","status":"published","published":"2026-03-19T10:20:31Z","modified":"2026-10-20T10:10:09Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"ROOT-APP-MAVEN-CVE-2024-7254","title":"CVE-2024-7254 in com.google.protobuf:protobuf-java - Patched by Root","description":"Root has patched CVE-2024-7254 in the com.google.protobuf:protobuf-java package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-09-10T12:21:31Z","modified":"2026-09-10T13:15:04.879852197Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:27.066589Z"},{"id":"UBUNTU-CVE-2024-7254","description":"Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsParser or Java Protobuf Lite parser, or against Protobuf map fields, creates unbounded recursions that can be abused by an attacker.","status":"published","published":"2024-09-19T01:15:00Z","modified":"2026-04-22T15:27:50.618389Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:18.664792Z"},{"id":"CLSA-2025-1756080325","title":"TuxCare security update for com.google.protobuf:protobuf-java (2 CVEs)","description":"TuxCare rebuilt com.google.protobuf:protobuf-java to address 2 CVEs. Fixed in 2.5.0-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-10-15T09:45:03.058168879Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1757017511","title":"protobuf: Fix of CVE-2024-7254","description":"- CVE-2024-7254: prevent stack overflow by limiting recursion depth when parsing\n  nested Protocol Buffers data","status":"published","published":"2025-09-04T20:25:15Z","modified":"2026-06-01T00:31:12.037754325Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1762906010","title":"TuxCare security update for com.google.protobuf:protobuf-java (2 CVEs)","description":"TuxCare rebuilt com.google.protobuf:protobuf-java to address 2 CVEs. Fixed in 2.6.1-tuxcare.1.","status":"published","published":"2026-08-04T14:52:06Z","modified":"2026-10-15T09:46:12.282737259Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2026-1774398095","title":"TuxCare security update for com.google.protobuf (1 CVE)","description":"TuxCare rebuilt 4 com.google.protobuf packages to address 1 CVE. Fixed in 3.21.1-tuxcare.1.","status":"published","published":"2026-08-04T14:52:15Z","modified":"2026-11-02T19:45:19.580208011Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1779410884","title":"TuxCare security update for com.google.protobuf (1 CVE)","description":"TuxCare rebuilt 4 com.google.protobuf packages to address 1 CVE. Fixed in 3.21.9-tuxcare.2.","status":"published","published":"2026-08-04T14:52:33Z","modified":"2026-11-02T19:45:32.592446657Z","updated_at":"2026-11-02T20:30:18.404297Z"},{"id":"CLSA-2026-1780966321","title":"TuxCare security update for com.google.protobuf (1 CVE)","description":"TuxCare rebuilt 4 com.google.protobuf packages to address 1 CVE. Fixed in 3.19.6-tuxcare.1.","status":"published","published":"2026-08-04T14:52:35Z","modified":"2026-11-02T19:45:34.991346382Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1787934757","title":"Fix CVE(s): CVE-2024-7254, CVE-2026-0994","description":"   * SECURITY UPDATE: Unbounded recursion when parsing nested groups in\n     protobuf-java\n     - debian/patches/CVE-2024-7254.patch: bound the depth of the\n       skipMessage()/skipField() recursion in CodedInputStream and of the\n       nested-group recursion in UnknownFieldSetLite with the existing\n       recursion limit, so a stream of nested SGROUP tags can no longer\n       exhaust the Java stack\n     - CVE-2024-7254\n   * SECURITY UPDATE: Nested Any messages bypass the JSON parser recursion\n     depth limit in python-protobuf\n     - debian/patches/CVE-2026-0994.patch: add max_recursion_depth accounting\n       to json_format and route nested well-known types in\n       _ConvertAnyMessage() through ConvertMessage() so the depth is tracked\n     - CVE-2026-0994","status":"published","published":"2026-08-28T18:16:32Z","modified":"2026-10-26T09:32:03.744522824Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1792011714","title":"TuxCare security update for com.google.protobuf:protobuf-java (2 CVEs)","description":"TuxCare rebuilt com.google.protobuf:protobuf-java to address 2 CVEs. Fixed in 3.7.1-tuxcare.1.","status":"published","published":"2026-10-14T21:01:54Z","modified":"2026-11-02T19:46:27.841323723Z","updated_at":"2026-11-02T20:29:13.152182Z"},{"id":"CLSA-2026-1792011894","title":"TuxCare security update for com.google.protobuf:protobuf-java (2 CVEs)","description":"TuxCare rebuilt com.google.protobuf:protobuf-java to address 2 CVEs. Fixed in 3.6.1-tuxcare.1.","status":"published","published":"2026-10-14T21:04:54Z","modified":"2026-11-02T19:46:27.816445921Z","updated_at":"2026-11-02T20:29:13.152182Z"},{"id":"CLSA-2026-1792016334","title":"TuxCare security update for com.google.protobuf (1 CVE)","description":"TuxCare rebuilt 4 com.google.protobuf packages to address 1 CVE. Fixed in 3.21.12-tuxcare.1.","status":"published","published":"2026-10-14T22:18:54Z","modified":"2026-11-02T19:46:27.839814081Z","updated_at":"2026-11-02T20:29:13.152182Z"},{"id":"CLSA-2026-1792049845","title":"TuxCare security update for com.google.protobuf (3 CVEs)","description":"TuxCare rebuilt 2 com.google.protobuf packages to address 3 CVEs. Fixed in 3.12.0-tuxcare.1.","status":"published","published":"2026-10-15T07:37:25Z","modified":"2026-11-02T19:46:28.003144857Z","updated_at":"2026-11-02T20:29:13.152182Z"},{"id":"CLSA-2026-1792049928","title":"TuxCare security update for com.google.protobuf (2 CVEs)","description":"TuxCare rebuilt 2 com.google.protobuf packages to address 2 CVEs. Fixed in 3.16.1-tuxcare.1.","status":"published","published":"2026-10-15T07:38:48Z","modified":"2026-11-02T19:46:27.801344104Z","updated_at":"2026-11-02T20:29:13.152182Z"},{"id":"CLSA-2026-1792050076","title":"TuxCare security update for com.google.protobuf (1 CVE)","description":"TuxCare rebuilt 4 com.google.protobuf packages to address 1 CVE. Fixed in 3.21.7-tuxcare.1.","status":"published","published":"2026-10-15T07:41:16Z","modified":"2026-11-02T19:46:28.369258119Z","updated_at":"2026-11-02T20:29:13.152182Z"},{"id":"CLSA-2026-1792050084","title":"TuxCare security update for com.google.protobuf (2 CVEs)","description":"TuxCare rebuilt 4 com.google.protobuf packages to address 2 CVEs. Fixed in 3.19.2-tuxcare.1.","status":"published","published":"2026-10-15T07:41:24Z","modified":"2026-11-02T19:46:28.374230666Z","updated_at":"2026-11-02T20:29:13.152182Z"},{"id":"CLSA-2026-1793122706","title":"TuxCare security update for com.google.protobuf (3 CVEs)","description":"TuxCare rebuilt 2 com.google.protobuf packages to address 3 CVEs. Fixed in 3.12.2-tuxcare.1.","status":"published","published":"2026-10-27T17:38:26Z","modified":"2026-11-02T19:46:32.3400755Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"openSUSE-SU-2025:14832-1","title":"libprotobuf-lite28_3_0-28.3-15.1 on GA media","description":"These are all security issues fixed in the libprotobuf-lite28_3_0-28.3-15.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-02-24T00:00:00Z","modified":"2026-02-04T03:42:17.425333Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"ROOT-OS-ALPINE-320-CVE-2024-7254","title":"CVE-2024-7254 in rootio-protobuf - Patched by Root","description":"Root has patched CVE-2024-7254 in the rootio-protobuf package for Root:Alpine:3.20. Multiple fixed versions available.","status":"published","published":"2025-08-12T08:23:12Z","modified":"2026-02-13T03:19:43.792255Z","updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"SUSE-SU-2024:3745-1","title":"Security update for protobuf","description":"This update for protobuf fixes the following issues:\n\n- CVE-2024-7254: Fixed stack overflow vulnerability in Protocol Buffer (bsc#1230778)\n","status":"published","published":"2024-10-22T13:39:36Z","modified":"2026-02-04T03:12:16.962739Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3746-1","title":"Security update for protobuf","description":"This update for protobuf fixes the following issues:\n\n- CVE-2024-7254: Fixed stack overflow vulnerability in Protocol Buffer (bsc#1230778)\n","status":"published","published":"2024-10-22T13:40:55Z","modified":"2026-02-04T03:47:58.663708Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3747-1","title":"Security update for protobuf","description":"This update for protobuf fixes the following issues:\n\n- CVE-2024-7254: Fixed stack overflow vulnerability in Protocol Buffer (bsc#1230778)\n","status":"published","published":"2024-10-22T13:41:37Z","modified":"2026-02-04T03:37:10.530879Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2025:20074-1","title":"Security update for protobuf","description":"This update for protobuf fixes the following issues:\n\n- CVE-2024-7254: Fixed a stack overflow vulnerability in protocol buffers (bsc#1230778)\n","status":"published","published":"2025-02-03T09:04:20Z","modified":"2026-03-23T04:50:41.430625Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20672-1","title":"Security update for protobuf","description":"This update for protobuf fixes the following issues:\n\n- CVE-2024-2410: Use after free when parsing JSON from a stream (bsc#1223947).\n- CVE-2024-7254: StackOverflow vulnerability in Protocol Buffers (bsc#1230778).\n- CVE-2025-4565: Parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages can lead to crash due to RecursionError (bsc#1244663).\n","status":"published","published":"2025-09-05T12:16:11Z","modified":"2026-03-23T04:49:01.376492Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"USN-7435-1","title":"protobuf vulnerability","description":"It was discovered that Protocol Buffers incorrectly handled memory when\nreceiving malicious input using the Java bindings. An attacker could\npossibly use this issue to cause a denial of service.\n","status":"published","published":"2025-04-14T13:31:32Z","modified":"2026-04-22T10:57:47.01935Z","updated_at":"2026-11-02T16:58:19.988474Z"},{"id":"USN-7629-1","title":"protobuf vulnerabilities","description":"It was discovered that Protocol Buffers incorrectly handled memory when\nreceiving malicious input using the Python bindings. An attacker could\npossibly use this issue to cause a denial of service. (CVE-2025-4565)\n\nIt was discovered that Protocol Buffers incorrectly handled memory when\nreceiving malicious input using the Java bindings. An attacker could\npossibly use this issue to cause a denial of service. This issue only\naffected Ubuntu 25.04. (CVE-2024-7254)","status":"published","published":"2025-07-09T12:08:30Z","modified":"2026-04-22T11:00:42.998241Z","updated_at":"2026-11-02T16:58:19.988474Z"},{"id":"USN-7629-2","title":"protobuf vulnerabilities","description":"USN-7435-1 and USN-7629-1 fixed vulnerabilities in Protocol Buffers\nfor several releases of Ubuntu. This update provides the corresponding\nfixes for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that Protocol Buffers incorrectly handled memory when\n receiving malicious input using the Python bindings. An attacker could\n possibly use this issue to cause a denial of service. (CVE-2025-4565)\n\n It was discovered that Protocol Buffers incorrectly handled memory when\n receiving malicious input using the Java bindings. An attacker could\n possibly use this issue to cause a denial of service. This issue only\n affected Ubuntu 25.04. (CVE-2024-7254)","status":"published","published":"2025-09-02T22:03:54Z","modified":"2026-06-25T13:32:30.526345966Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}