{"id":"CVE-2026-0994","aliases":["ALSA-2026:3094","ALSA-2026:3095","AZL-75830","AZL-76481","AZL-76487","AZL-76505","AZL-76602","BELL-CVE-2026-0994","CLSA-2026-1770768843","CLSA-2026-1772451263","CLSA-2026-1772453362","CLSA-2026-1787934757","CLSA-2026-1788858730","CLSA-2026-1791188851","DEBIAN-CVE-2026-0994","EUVD-2026-4322","GHSA-7gcm-g887-7qv7","OESA-2026-1432","PYSEC-2026-1805","RHSA-2026:3059","RHSA-2026:3094","RHSA-2026:3095","RHSA-2026:3097","RHSA-2026:3218","RHSA-2026:3219","RHSA-2026:3220","RHSA-2026:3958","RHSA-2026:3959","RLSA-2026:3094","RLSA-2026:3095","ROOT-APP-PYPI-CVE-2026-0994","SUSE-SU-2026:0374-1","SUSE-SU-2026:0517-1","SUSE-SU-2026:0563-1","SUSE-SU-2026:0618-1","SUSE-SU-2026:1653-1","SUSE-SU-2026:20352-1","SUSE-SU-2026:20490-1","SUSE-SU-2026:20753-1","SUSE-SU-2026:20907-1","UBUNTU-CVE-2026-0994","USN-8063-1","USN-8063-2","openSUSE-SU-2026:10515-1","openSUSE-SU-2026:12274-1","openSUSE-SU-2026:20390-1"],"status":"published","title":"Denial of Service in Python Protobuf","description":"A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.\n\nDue to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.","severity":{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00712,"percentile":0.53863,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-674"],"published":"2026-01-23T14:55:16Z","modified":"2026-11-05T05:40:51Z","exploits":[{"source":"pocgithub","id":"Vardhan0257/upb-any-recursion-audit","title":"Vardhan0257/upb-any-recursion-audit","date":"2026-09-16","url":"https://github.com/Vardhan0257/upb-any-recursion-audit"}],"fixes":[{"ecosystem":"PyPI","package":"protobuf","fixed_in":["6.33.5","5.29.6"],"sources":["ghsa","osv"]},{"ecosystem":"AlmaLinux:10","package":"protobuf","fixed_in":["3.19.6-15.el10_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"protobuf-compiler","fixed_in":["3.19.6-15.el10_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"protobuf-devel","fixed_in":["3.19.6-15.el10_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"protobuf-lite","fixed_in":["3.19.6-15.el10_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"protobuf-lite-devel","fixed_in":["3.19.6-15.el10_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"python3-protobuf","fixed_in":["3.19.6-15.el10_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"protobuf","fixed_in":["3.14.0-17.el9_7"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"protobuf-compiler","fixed_in":["3.14.0-17.el9_7"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"protobuf-devel","fixed_in":["3.14.0-17.el9_7"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"protobuf-lite","fixed_in":["3.14.0-17.el9_7"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"protobuf-lite-devel","fixed_in":["3.14.0-17.el9_7"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"python3-protobuf","fixed_in":["3.14.0-17.el9_7"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"protobuf","fixed_in":["25.3-6"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"mysql","fixed_in":["8.0.45-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"protobuf","fixed_in":["3.17.3-5"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"pytorch","fixed_in":["2.0.0-14"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"pytorch","fixed_in":["2.2.2-12"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"py3-protobuf","fixed_in":["6.33.5-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:PyPI","package":"protobuf","fixed_in":["4.25.8.post1+tuxcare","4.24.3.post2+tuxcare","4.25.9.post1+tuxcare"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"protobuf","fixed_in":["3.14.0-16.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"protobuf-compiler","fixed_in":["3.14.0-16.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"protobuf-devel","fixed_in":["3.14.0-16.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"protobuf-emacs","fixed_in":["3.14.0-16.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"protobuf-lite","fixed_in":["3.14.0-16.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"protobuf-lite-devel","fixed_in":["3.14.0-16.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"protobuf-lite-static","fixed_in":["3.14.0-16.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"protobuf-static","fixed_in":["3.14.0-16.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"protobuf-vim","fixed_in":["3.14.0-16.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-protobuf","fixed_in":["3.14.0-16.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf","fixed_in":["3.14.0-16.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-compiler","fixed_in":["3.14.0-16.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-devel","fixed_in":["3.14.0-16.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-emacs","fixed_in":["3.14.0-16.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-lite","fixed_in":["3.14.0-16.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-lite-devel","fixed_in":["3.14.0-16.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-lite-static","fixed_in":["3.14.0-16.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-static","fixed_in":["3.14.0-16.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-vim","fixed_in":["3.14.0-16.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-protobuf","fixed_in":["3.14.0-16.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"protobuf","fixed_in":["3.21.12-3+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"protobuf","fixed_in":["3.21.12-11+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"protobuf","fixed_in":["3.21.12-16"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"protobuf","fixed_in":["25.1-13.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"protobuf","fixed_in":["25.1-13.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"protobuf","fixed_in":["25.1-13.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"protobuf","fixed_in":["25.1-13.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"protobuf","fixed_in":["3.14.0-9.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"protobuf","fixed_in":["3.14.0-11.oe2203sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"protobuf","fixed_in":["0:3.14.0-13.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"protobuf-compiler-debuginfo","fixed_in":["0:3.14.0-13.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"protobuf-debuginfo","fixed_in":["0:3.14.0-13.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"protobuf-debugsource","fixed_in":["0:3.14.0-13.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"protobuf-lite","fixed_in":["0:3.14.0-13.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"protobuf-lite-debuginfo","fixed_in":["0:3.14.0-13.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"python3-protobuf","fixed_in":["0:3.14.0-13.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"protobuf-compiler","fixed_in":["0:3.14.0-13.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"protobuf-compiler-debuginfo","fixed_in":["0:3.14.0-13.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"protobuf-debuginfo","fixed_in":["0:3.14.0-13.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"protobuf-debugsource","fixed_in":["0:3.14.0-13.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"protobuf-devel","fixed_in":["0:3.14.0-13.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"protobuf-lite-debuginfo","fixed_in":["0:3.14.0-13.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"protobuf-lite-devel","fixed_in":["0:3.14.0-13.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"protobuf","fixed_in":["0:3.19.6-15.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"protobuf-compiler-debuginfo","fixed_in":["0:3.19.6-15.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"protobuf-debuginfo","fixed_in":["0:3.19.6-15.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"protobuf-debugsource","fixed_in":["0:3.19.6-15.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"protobuf-lite","fixed_in":["0:3.19.6-15.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"protobuf-lite-debuginfo","fixed_in":["0:3.19.6-15.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"python3-protobuf","fixed_in":["0:3.19.6-15.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"python3-protobuf-debuginfo","fixed_in":["0:3.19.6-15.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"protobuf-compiler","fixed_in":["0:3.19.6-15.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"protobuf-devel","fixed_in":["0:3.19.6-15.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"protobuf-lite-devel","fixed_in":["0:3.19.6-15.el10_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"protobuf","fixed_in":["0:3.14.0-17.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"protobuf-compiler-debuginfo","fixed_in":["0:3.14.0-17.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"protobuf-debuginfo","fixed_in":["0:3.14.0-17.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"protobuf-debugsource","fixed_in":["0:3.14.0-17.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"protobuf-lite","fixed_in":["0:3.14.0-17.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"protobuf-lite-debuginfo","fixed_in":["0:3.14.0-17.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-protobuf","fixed_in":["0:3.14.0-17.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"protobuf-compiler","fixed_in":["0:3.14.0-17.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"protobuf-compiler-debuginfo","fixed_in":["0:3.14.0-17.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"protobuf-debuginfo","fixed_in":["0:3.14.0-17.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"protobuf-debugsource","fixed_in":["0:3.14.0-17.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"protobuf-devel","fixed_in":["0:3.14.0-17.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"protobuf-lite-debuginfo","fixed_in":["0:3.14.0-17.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"protobuf-lite-devel","fixed_in":["0:3.14.0-17.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"protobuf","fixed_in":["0:3.14.0-9.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"protobuf-compiler-debuginfo","fixed_in":["0:3.14.0-9.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"protobuf-debuginfo","fixed_in":["0:3.14.0-9.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"protobuf-debugsource","fixed_in":["0:3.14.0-9.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"protobuf-lite","fixed_in":["0:3.14.0-9.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"protobuf-lite-debuginfo","fixed_in":["0:3.14.0-9.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"python3-protobuf","fixed_in":["0:3.14.0-9.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"protobuf","fixed_in":["0:3.19.6-11.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"protobuf-compiler-debuginfo","fixed_in":["0:3.19.6-11.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"protobuf-debuginfo","fixed_in":["0:3.19.6-11.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"protobuf-debugsource","fixed_in":["0:3.19.6-11.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"protobuf-lite","fixed_in":["0:3.19.6-11.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"protobuf-lite-debuginfo","fixed_in":["0:3.19.6-11.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"python3-protobuf","fixed_in":["0:3.19.6-11.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"python3-protobuf-debuginfo","fixed_in":["0:3.19.6-11.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"protobuf-compiler","fixed_in":["0:3.19.6-11.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"protobuf-devel","fixed_in":["0:3.19.6-11.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"protobuf-lite-devel","fixed_in":["0:3.19.6-11.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"protobuf","fixed_in":["0:3.14.0-16.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"protobuf-compiler-debuginfo","fixed_in":["0:3.14.0-16.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"protobuf-debuginfo","fixed_in":["0:3.14.0-16.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"protobuf-debugsource","fixed_in":["0:3.14.0-16.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"protobuf-lite","fixed_in":["0:3.14.0-16.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"protobuf-lite-debuginfo","fixed_in":["0:3.14.0-16.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"python3-protobuf","fixed_in":["0:3.14.0-16.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"protobuf-compiler","fixed_in":["0:3.14.0-16.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"protobuf-compiler-debuginfo","fixed_in":["0:3.14.0-16.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"protobuf-debuginfo","fixed_in":["0:3.14.0-16.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"protobuf-debugsource","fixed_in":["0:3.14.0-16.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"protobuf-devel","fixed_in":["0:3.14.0-16.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"protobuf-lite-debuginfo","fixed_in":["0:3.14.0-16.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"protobuf-lite-devel","fixed_in":["0:3.14.0-16.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"protobuf","fixed_in":["0:3.14.0-13.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"protobuf-compiler-debuginfo","fixed_in":["0:3.14.0-13.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"protobuf-debuginfo","fixed_in":["0:3.14.0-13.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"protobuf-debugsource","fixed_in":["0:3.14.0-13.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"protobuf-lite","fixed_in":["0:3.14.0-13.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"protobuf-lite-debuginfo","fixed_in":["0:3.14.0-13.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"python3-protobuf","fixed_in":["0:3.14.0-13.el9_2.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"protobuf","fixed_in":["0:3.19.6-15.el10_1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"protobuf","fixed_in":["0:3.14.0-17.el9_7"],"sources":["osv"]},{"ecosystem":"Root:PyPI","package":"protobuf","fixed_in":["4.24.1+aikido.3","4.25.9+aikido.2","6.31.1+aikido.3","4.24.4+aikido.1","4.25.9+aikido.3","4.25.5+aikido.3","4.25.7+aikido.1","4.24.4+aikido.2","4.25.7+aikido.2","6.31.1+aikido.5","4.25.9+aikido.7","4.25.5+aikido.11","6.31.1+aikido.6","3.20.0+aikido.4","4.25.7+aikido.3","4.24.1+aikido.4","4.24.4+aikido.3","4.24.4+aikido.4","3.20.0+aikido.5","4.24.1+aikido.5","4.25.5+aikido.12","4.25.9+aikido.8","4.25.7+aikido.4","6.31.1+aikido.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"protobuf","fixed_in":["25.1-150600.16.16.1","3.9.2-150200.4.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"protobuf","fixed_in":["25.1-150600.16.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"protobuf","fixed_in":["25.1-150600.16.16.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"protobuf","fixed_in":["25.1-150600.16.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"protobuf","fixed_in":["25.1-150500.12.14.1","3.9.2-150200.4.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"protobuf","fixed_in":["25.1-150500.12.14.1","3.9.2-150200.4.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"protobuf","fixed_in":["25.1-150400.9.19.1","3.9.2-150200.4.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"protobuf","fixed_in":["25.1-150400.9.19.1","3.9.2-150200.4.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"protobuf","fixed_in":["25.1-150400.9.19.1","3.9.2-150200.4.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"protobuf","fixed_in":["3.9.2-150200.4.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP6","package":"protobuf","fixed_in":["3.9.2-150200.4.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP7","package":"protobuf","fixed_in":["3.9.2-150200.4.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"protobuf","fixed_in":["3.9.2-150200.4.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"protobuf","fixed_in":["23.4-11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"protobuf","fixed_in":["23.4-slfo.1.1_3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"protobuf","fixed_in":["3.0.0-9.1ubuntu1.1+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"protobuf","fixed_in":["3.6.1.3-2ubuntu5.2+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"protobuf","fixed_in":["3.12.4-1ubuntu7.22.04.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"protobuf","fixed_in":["3.21.12-8.2ubuntu0.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"protobuf","fixed_in":["3.21.12-11ubuntu3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"protobuf","fixed_in":["3.21.12-15ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"protobuf","fixed_in":["3.21.12-15ubuntu1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"protobuf","fixed_in":["34.1-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.30.0rc1"},{"last_affected":"6.33.4"},{"fixed":"6.33.5"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.29.6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.6-15.el10_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"protobuf-compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.6-15.el10_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"protobuf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.6-15.el10_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"protobuf-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.6-15.el10_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"protobuf-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.6-15.el10_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.6-15.el10_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-17.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"protobuf-compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-17.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"protobuf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-17.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"protobuf-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-17.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"protobuf-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-17.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-17.el9_7"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.3-6"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.45-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.17.3-5"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"pytorch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-14"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"pytorch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2-12"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"py3-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.31.1-r1"},{"fixed":"6.33.5-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.25.8"},{"fixed":"4.25.8.post1+tuxcare"}]}],"versions":["4.25.8"]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-16.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"protobuf-compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-16.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"protobuf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-16.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"protobuf-emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-16.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"protobuf-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-16.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"protobuf-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-16.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"protobuf-lite-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-16.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"protobuf-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-16.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"protobuf-vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-16.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-16.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-16.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-16.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-16.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-16.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-16.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-16.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-lite-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-16.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-16.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"protobuf-vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-16.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-16.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libprotobuf-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-9.1ubuntu1.1+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libprotobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-9.1ubuntu1.1+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libprotobuf-lite10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-9.1ubuntu1.1+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libprotobuf10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-9.1ubuntu1.1+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libprotoc-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-9.1ubuntu1.1+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libprotoc10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-9.1ubuntu1.1+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"protobuf-compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-9.1ubuntu1.1+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-9.1ubuntu1.1+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-9.1ubuntu1.1+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.24.3"},{"fixed":"4.24.3.post2+tuxcare"}]}],"versions":["4.24.3","4.24.3.post1+tuxcare"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.25.9"},{"fixed":"4.25.9.post1+tuxcare"}]}],"versions":["4.25.9"]},{"source":"osv","ecosystem":"Debian:12","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.12-3+deb12u1"}]}],"versions":["3.21.12-3"]},{"source":"osv","ecosystem":"Debian:13","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.12-11+deb13u1"}]}],"versions":["3.21.12-11"]},{"source":"osv","ecosystem":"Debian:14","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.12-16"}]}],"versions":["3.21.12-11","3.21.12-12","3.21.12-13","3.21.12-14","3.21.12-15"]},{"source":"osv","ecosystem":"PyPI","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.30.0rc1"},{"fixed":"6.33.5"}]}],"versions":["6.30.0","6.30.0rc1","6.30.0rc2","6.30.1","6.30.2","6.31.0","6.31.0rc1","6.31.0rc2","6.31.1","6.32.0","6.32.0rc1","6.32.0rc2","6.32.1","6.33.0","6.33.0rc1","6.33.0rc2","6.33.1","6.33.2","6.33.3","6.33.4"]},{"source":"osv","ecosystem":"PyPI","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.29.6"}]}],"versions":["2.0.0beta","2.0.3","2.3.0","2.4.1","2.5.0","2.6.0","2.6.1","3.0.0","3.0.0a2","3.0.0a3","3.0.0b1","3.0.0b1.post1","3.0.0b1.post2","3.0.0b2","3.0.0b2.post1","3.0.0b2.post2","3.0.0b3","3.0.0b4","3.1.0","3.1.0.post1","3.10.0","3.10.0rc1","3.11.0","3.11.0rc1","3.11.0rc2","3.11.1","3.11.2","3.11.3","3.12.0","3.12.0rc1","3.12.0rc2","3.12.1","3.12.2","3.12.4","3.13.0","3.13.0rc3","3.14.0","3.14.0rc1","3.14.0rc2","3.14.0rc3","3.15.0","3.15.0rc1","3.15.0rc2","3.15.1","3.15.2","3.15.3","3.15.4","3.15.5","3.15.6","3.15.7","3.15.8","3.16.0","3.16.0rc1","3.16.0rc2","3.17.0","3.17.0rc1","3.17.0rc2","3.17.1","3.17.2","3.17.3","3.18.0","3.18.0rc1","3.18.0rc2","3.18.1","3.18.3","3.19.0","3.19.0rc1","3.19.0rc2","3.19.1","3.19.2","3.19.3","3.19.4","3.19.5","3.19.6","3.2.0","3.2.0rc1","3.2.0rc1.post1","3.2.0rc2","3.20.0","3.20.0rc1","3.20.0rc2","3.20.1","3.20.1rc1","3.20.2","3.20.3","3.3.0","3.4.0","3.5.0.post1","3.5.1","3.5.2","3.5.2.post1","3.6.0","3.6.1","3.7.0","3.7.0rc2","3.7.0rc3","3.7.1","3.8.0","3.8.0rc1","3.9.0","3.9.0rc1","3.9.1","3.9.2","4.0.0rc1","4.0.0rc2","4.21.0","4.21.0rc1","4.21.0rc2","4.21.1","4.21.10","4.21.11","4.21.12","4.21.2","4.21.3","4.21.4","4.21.5","4.21.6","4.21.7","4.21.8","4.21.9","4.22.0","4.22.0rc1","4.22.0rc2","4.22.0rc3","4.22.1","4.22.3","4.22.4","4.22.5","4.23.0","4.23.0rc2","4.23.0rc3","4.23.1","4.23.2","4.23.3","4.23.4","4.24.0","4.24.0rc1","4.24.0rc2","4.24.0rc3","4.24.1","4.24.2","4.24.3","4.24.4","4.25.0","4.25.0rc1","4.25.0rc2","4.25.1","4.25.2","4.25.3","4.25.4","4.25.5","4.25.6","4.25.7","4.25.8","4.25.9","5.26.0","5.26.0rc1","5.26.0rc2","5.26.0rc3","5.26.1","5.27.0","5.27.0rc1","5.27.0rc2","5.27.0rc3","5.27.1","5.27.2","5.27.3","5.27.4","5.27.5","5.28.0","5.28.0rc1","5.28.0rc2","5.28.0rc3","5.28.1","5.28.2","5.28.3","5.29.0","5.29.0rc1","5.29.0rc2","5.29.0rc3","5.29.1","5.29.2","5.29.3","5.29.4","5.29.5"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-13.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-13.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-13.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-13.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-9.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-11.oe2203sp4"}]}]},{"source":"osv","ecosystem":"PyPI","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.29.6"},{"introduced":"6.30.0rc1"},{"fixed":"6.33.5"}]}],"versions":["2.0.0beta","2.0.3","2.3.0","2.4.1","2.5.0","2.6.0","2.6.1","3.0.0","3.0.0a2","3.0.0a3","3.0.0b1","3.0.0b1.post1","3.0.0b1.post2","3.0.0b2","3.0.0b2.post1","3.0.0b2.post2","3.0.0b3","3.0.0b4","3.1.0","3.1.0.post1","3.10.0","3.10.0rc1","3.11.0","3.11.0rc1","3.11.0rc2","3.11.1","3.11.2","3.11.3","3.12.0","3.12.0rc1","3.12.0rc2","3.12.1","3.12.2","3.12.4","3.13.0","3.13.0rc3","3.14.0","3.14.0rc1","3.14.0rc2","3.14.0rc3","3.15.0","3.15.0rc1","3.15.0rc2","3.15.1","3.15.2","3.15.3","3.15.4","3.15.5","3.15.6","3.15.7","3.15.8","3.16.0","3.16.0rc1","3.16.0rc2","3.17.0","3.17.0rc1","3.17.0rc2","3.17.1","3.17.2","3.17.3","3.18.0","3.18.0rc1","3.18.0rc2","3.18.1","3.18.3","3.19.0","3.19.0rc1","3.19.0rc2","3.19.1","3.19.2","3.19.3","3.19.4","3.19.5","3.19.6","3.2.0","3.2.0rc1","3.2.0rc1.post1","3.2.0rc2","3.20.0","3.20.0rc1","3.20.0rc2","3.20.1","3.20.1rc1","3.20.2","3.20.3","3.3.0","3.4.0","3.5.0.post1","3.5.1","3.5.2","3.5.2.post1","3.6.0","3.6.1","3.7.0","3.7.0rc2","3.7.0rc3","3.7.1","3.8.0","3.8.0rc1","3.9.0","3.9.0rc1","3.9.1","3.9.2","4.0.0rc1","4.0.0rc2","4.21.0","4.21.0rc1","4.21.0rc2","4.21.1","4.21.10","4.21.11","4.21.12","4.21.2","4.21.3","4.21.4","4.21.5","4.21.6","4.21.7","4.21.8","4.21.9","4.22.0","4.22.0rc1","4.22.0rc2","4.22.0rc3","4.22.1","4.22.3","4.22.4","4.22.5","4.23.0","4.23.0rc2","4.23.0rc3","4.23.1","4.23.2","4.23.3","4.23.4","4.24.0","4.24.0rc1","4.24.0rc2","4.24.0rc3","4.24.1","4.24.2","4.24.3","4.24.4","4.25.0","4.25.0rc1","4.25.0rc2","4.25.1","4.25.2","4.25.3","4.25.4","4.25.5","4.25.6","4.25.7","4.25.8","4.25.9","5.26.0","5.26.0rc1","5.26.0rc2","5.26.0rc3","5.26.1","5.27.0","5.27.0rc1","5.27.0rc2","5.27.0rc3","5.27.1","5.27.2","5.27.3","5.27.4","5.27.5","5.28.0","5.28.0rc1","5.28.0rc2","5.28.0rc3","5.28.1","5.28.2","5.28.3","5.29.0","5.29.0rc1","5.29.0rc2","5.29.0rc3","5.29.1","5.29.2","5.29.3","5.29.4","5.29.5","6.30.0","6.30.0rc1","6.30.0rc2","6.30.1","6.30.2","6.31.0","6.31.0rc1","6.31.0rc2","6.31.1","6.32.0","6.32.0rc1","6.32.0rc2","6.32.1","6.33.0","6.33.0rc1","6.33.0rc2","6.33.1","6.33.2","6.33.3","6.33.4"]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-13.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"protobuf-compiler-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-13.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"protobuf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-13.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"protobuf-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-13.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"protobuf-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-13.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"protobuf-lite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-13.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"python3-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-13.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"protobuf-compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-13.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"protobuf-compiler-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-13.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"protobuf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-13.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"protobuf-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-13.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"protobuf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-13.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"protobuf-lite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-13.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"protobuf-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-13.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-15.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"protobuf-compiler-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-15.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"protobuf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-15.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"protobuf-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-15.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"protobuf-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-15.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"protobuf-lite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-15.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"python3-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-15.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"python3-protobuf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-15.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"protobuf-compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-15.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"protobuf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-15.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"protobuf-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-15.el10_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-17.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"protobuf-compiler-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-17.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"protobuf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-17.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"protobuf-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-17.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"protobuf-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-17.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"protobuf-lite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-17.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-17.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"protobuf-compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-17.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"protobuf-compiler-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-17.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"protobuf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-17.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"protobuf-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-17.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"protobuf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-17.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"protobuf-lite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-17.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"protobuf-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-17.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-9.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"protobuf-compiler-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-9.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"protobuf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-9.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"protobuf-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-9.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"protobuf-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-9.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"protobuf-lite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-9.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"python3-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-9.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-11.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"protobuf-compiler-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-11.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"protobuf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-11.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"protobuf-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-11.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"protobuf-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-11.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"protobuf-lite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-11.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"python3-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-11.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"python3-protobuf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-11.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"protobuf-compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-11.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"protobuf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-11.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"protobuf-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-11.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-16.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"protobuf-compiler-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-16.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"protobuf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-16.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"protobuf-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-16.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"protobuf-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-16.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"protobuf-lite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-16.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"python3-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-16.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"protobuf-compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-16.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"protobuf-compiler-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-16.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"protobuf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-16.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"protobuf-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-16.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"protobuf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-16.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"protobuf-lite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-16.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"protobuf-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-16.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-13.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"protobuf-compiler-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-13.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"protobuf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-13.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"protobuf-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-13.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"protobuf-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-13.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"protobuf-lite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-13.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"python3-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-13.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"automation-platform-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.6-1.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.6::el9","package":"python3.12-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.28-1.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"python3.12-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.28-1.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el10","package":"receptor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el10ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el10","package":"receptor-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el10ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el10","package":"receptor-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el10ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el10","package":"receptorctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el10ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.6::el9","package":"receptor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.6::el9","package":"receptorctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_inside:2.6::el9","package":"receptor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_inside:2.6::el9","package":"receptorctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"receptor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"receptor-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"receptor-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"receptorctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"python3.12-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.3-2.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"python3.12-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.3-2.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"python3.12-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.3-2.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"python3.12-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.29.6-1.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"python3.12-protobuf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.29.6-1.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"python3.12-protobuf-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.29.6-1.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.6::el9","package":"automation-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.9-1.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.6::el9","package":"automation-controller-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.9-1.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"automation-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.9-1.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"automation-controller-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.9-1.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"automation-controller-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.9-1.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"automation-controller-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.9-1.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"automation-controller-venv-tower","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.9-1.el9ap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.5::el8","package":"python3.12-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.28-1.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.28-1.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.5::el9","package":"python3.12-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.28-1.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.28-1.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.5::el8","package":"receptor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.5::el8","package":"receptorctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_inside:2.5::el8","package":"receptor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_inside:2.5::el8","package":"receptorctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"receptor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"receptor-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"receptor-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"receptorctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.5::el9","package":"receptor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.5::el9","package":"receptorctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_inside:2.5::el9","package":"receptor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_inside:2.5::el9","package":"receptorctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"receptor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"receptor-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"receptor-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"receptorctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-4.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.3-2.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.3-2.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.3-2.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.3-2.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.3-2.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.3-2.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.29.6-1.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-protobuf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.29.6-1.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-protobuf-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.29.6-1.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.29.6-1.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-protobuf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.29.6-1.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-protobuf-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.29.6-1.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"automation-gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260225-1.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"automation-gateway-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260225-1.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"automation-gateway-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260225-1.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"automation-gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260225-1.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"automation-gateway-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260225-1.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"automation-gateway-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260225-1.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.5::el8","package":"automation-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.26-1.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.5::el8","package":"automation-controller-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.26-1.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"automation-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.26-1.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"automation-controller-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.26-1.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"automation-controller-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.26-1.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"automation-controller-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.26-1.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"automation-controller-venv-tower","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.26-1.el8ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.5::el9","package":"automation-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.26-1.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.5::el9","package":"automation-controller-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.26-1.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"automation-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.26-1.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"automation-controller-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.26-1.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"automation-controller-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.26-1.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"automation-controller-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.26-1.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"automation-controller-venv-tower","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.26-1.el9ap"}]}],"bundled":11},{"source":"osv","ecosystem":"Rocky Linux:10","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.19.6-15.el10_1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-17.el9_7"}]}]},{"source":"osv","ecosystem":"Root:PyPI","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.24.1+aikido.3"},{"fixed":"4.25.9+aikido.2"},{"fixed":"6.31.1+aikido.3"},{"fixed":"4.24.4+aikido.1"},{"fixed":"4.25.9+aikido.3"},{"fixed":"4.25.5+aikido.3"},{"fixed":"4.25.7+aikido.1"},{"fixed":"4.24.4+aikido.2"},{"fixed":"4.25.7+aikido.2"},{"fixed":"6.31.1+aikido.5"},{"fixed":"4.25.9+aikido.7"},{"fixed":"4.25.5+aikido.11"},{"fixed":"6.31.1+aikido.6"},{"fixed":"3.20.0+aikido.4"},{"fixed":"4.25.7+aikido.3"},{"fixed":"4.24.1+aikido.4"},{"fixed":"4.24.4+aikido.3"},{"fixed":"4.24.4+aikido.4"},{"fixed":"3.20.0+aikido.5"},{"fixed":"4.24.1+aikido.5"},{"fixed":"4.25.5+aikido.12"},{"fixed":"4.25.9+aikido.8"},{"fixed":"4.25.7+aikido.4"},{"fixed":"6.31.1+aikido.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150600.16.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150600.16.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150600.16.16.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150600.16.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150500.12.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150500.12.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150400.9.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150400.9.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1-150400.9.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-150200.4.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-150200.4.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-150200.4.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-150200.4.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-150200.4.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-150200.4.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-150200.4.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP6","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-150200.4.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP7","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-150200.4.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-150200.4.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.4-11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.4-slfo.1.1_3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.3-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.3-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.3-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"python-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.28.3-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.3-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.3-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"python-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.28.3-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-9.1ubuntu1.1+esm4"}]}],"versions":["3.0.0-9ubuntu5","3.0.0-9ubuntu6","3.0.0-9.1ubuntu1","3.0.0-9.1ubuntu1.1","3.0.0-9.1ubuntu1.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1.3-2ubuntu5.2+esm3"}]}],"versions":["3.6.1.3-2","3.6.1.3-2ubuntu1","3.6.1.3-2ubuntu3","3.6.1.3-2ubuntu4","3.6.1.3-2ubuntu5","3.6.1.3-2ubuntu5.2","3.6.1.3-2ubuntu5.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.4-1ubuntu7.22.04.6"}]}],"versions":["3.12.4-1ubuntu3","3.12.4-1ubuntu5","3.12.4-1ubuntu6","3.12.4-1ubuntu7","3.12.4-1ubuntu7.22.04.1","3.12.4-1ubuntu7.22.04.2","3.12.4-1ubuntu7.22.04.4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.12-8.2ubuntu0.3"}]}],"versions":["3.21.12-7ubuntu1","3.21.12-8ubuntu1","3.21.12-8ubuntu5","3.21.12-8.2","3.21.12-8.2build1","3.21.12-8.2ubuntu0.1","3.21.12-8.2ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.12-11ubuntu3.1"}]}],"versions":["3.21.12-10build2","3.21.12-11","3.21.12-11ubuntu1","3.21.12-11ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.12-15ubuntu1"}]}]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.12-15ubuntu1"}]}],"versions":["3.21.12-11ubuntu3","3.21.12-14","3.21.12-14build1","3.21.12-15"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.4-1ubuntu7.22.04.6"}]}],"versions":["3.12.4-1ubuntu3","3.12.4-1ubuntu5","3.12.4-1ubuntu6","3.12.4-1ubuntu7","3.12.4-1ubuntu7.22.04.1","3.12.4-1ubuntu7.22.04.2","3.12.4-1ubuntu7.22.04.4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.12-8.2ubuntu0.3"}]}],"versions":["3.21.12-7ubuntu1","3.21.12-8ubuntu1","3.21.12-8ubuntu5","3.21.12-8.2","3.21.12-8.2build1","3.21.12-8.2ubuntu0.1","3.21.12-8.2ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.12-11ubuntu3.1"}]}],"versions":["3.21.12-10build2","3.21.12-11","3.21.12-11ubuntu1","3.21.12-11ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-9.1ubuntu1.1+esm4"}]}],"versions":["3.0.0-9ubuntu5","3.0.0-9ubuntu6","3.0.0-9.1ubuntu1","3.0.0-9.1ubuntu1.1","3.0.0-9.1ubuntu1.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1.3-2ubuntu5.2+esm3"}]}],"versions":["3.6.1.3-2","3.6.1.3-2ubuntu1","3.6.1.3-2ubuntu3","3.6.1.3-2ubuntu4","3.6.1.3-2ubuntu5","3.6.1.3-2ubuntu5.2","3.6.1.3-2ubuntu5.2+esm2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"34.1-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"onnxruntime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.0-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.3-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"protobuf-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.3-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.28.3-160000.3.1"}]}],"bundled":2}],"products":[{"vendor":"google","product":"protobuf"},{"vendor":"python","product":"protobuf"},{"vendor":"red hat","product":"red hat ai inference server 3.2"},{"vendor":"red hat","product":"red hat ai inference server 3.3"},{"vendor":"red hat","product":"red hat amq clients"},{"vendor":"red hat","product":"red hat ansible automation platform 2"},{"vendor":"red hat","product":"red hat ansible automation platform 2.5 for rhel 8"},{"vendor":"red hat","product":"red hat ansible automation platform 2.5 for rhel 9"},{"vendor":"red hat","product":"red hat ansible automation platform 2.6 for rhel 9"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.0 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat openstack platform 16.2"}],"references":[{"url":"https://github.com/protocolbuffers/protobuf/pull/25239","tags":["Patch","Vendor Advisory","fix","web","article","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-0994","tags":["vdb-entry","x_refsource_REDHAT","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2432398","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0994.json","tags":["x_sadp-csaf-vex","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3959","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3958","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3218","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3094","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3097","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3220","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3059","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3219","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3095","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:61627","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3461","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3462","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:61629","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8748","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8746","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8747","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:16174","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0994","tags":["web","advisory"]},{"url":"https://github.com/protocolbuffers/protobuf/issues/25070","tags":["web"]},{"url":"https://github.com/protocolbuffers/protobuf/commit/d2b001626d137c62dfee6c88c87324102531868b","tags":["web"]},{"url":"https://github.com/protocolbuffers/protobuf/commit/5ebddcb1bcbe51d1fe323baa145e85f4f23128cf","tags":["web"]},{"url":"https://github.com/advisories/GHSA-7gcm-g887-7qv7","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/2432398","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-3094.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-3095.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-0994","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1772451263.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1772453362.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1787934757.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7254","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/0xxx/CVE-2026-0994.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-0994","tags":["advisory"]},{"url":"https://github.com/protocolbuffers/protobuf","tags":["package"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1432","tags":["advisory"]},{"url":"https://pypi.org/project/protobuf","tags":["package"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3059.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0994","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3094.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3095.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3097.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3218.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3219.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3220.json","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6/html/release_notes/patch_releases","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2427456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2428412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2428421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2428426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2430472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2431740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2431959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2434432","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2436338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2436339","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2436340","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2436341","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2436342","tags":["report"]},{"url":"https://issues.redhat.com/browse/AAP-62864","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3958.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13465","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13465","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13465","tags":["advisory"]},{"url":"https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-14550","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-14550","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14550","tags":["advisory"]},{"url":"https://docs.djangoproject.com/en/dev/releases/security/","tags":["article"]},{"url":"https://groups.google.com/g/django-announce","tags":["article"]},{"url":"https://www.djangoproject.com/weblog/2026/feb/03/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-59057","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-59057","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-59057","tags":["advisory"]},{"url":"https://github.com/remix-run/react-router/security/advisories/GHSA-3cgp-3xvw-98x8","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61726","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61726","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61726","tags":["advisory"]},{"url":"https://go.dev/cl/736712","tags":["article"]},{"url":"https://go.dev/issue/77101","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4341","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69223","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69223","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69223","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp/commit/2b920c39002cee0ec5b402581779bbaaf7c9138a","tags":["article"]},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6mq8-rvhq-8wgg","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-1207","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-1207","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1207","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-1285","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-1285","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1285","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-1287","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-1287","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1287","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-1312","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-1312","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1312","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-21884","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-21884","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21884","tags":["advisory"]},{"url":"https://github.com/remix-run/react-router/security/advisories/GHSA-8v8x-cx79-35w7","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-22029","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-22029","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22029","tags":["advisory"]},{"url":"https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-23490","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-23490","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23490","tags":["advisory"]},{"url":"https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970","tags":["article"]},{"url":"https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2","tags":["article"]},{"url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-24049","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-24049","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24049","tags":["advisory"]},{"url":"https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef","tags":["article"]},{"url":"https://github.com/pypa/wheel/releases/tag/0.46.2","tags":["article"]},{"url":"https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/release_notes/patch_releases","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5#Upgrading","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3959.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:3094","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:3095","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260374-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1257173","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0994","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260517-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260563-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260618-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261653-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1244663","tags":["report"]},{"url":"https://bugzilla.suse.com/1260019","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4565","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620352-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620490-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620753-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1244918","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620907-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-0994","tags":["report"]},{"url":"https://github.com/protocolbuffers/protobuf/pull/25586","tags":["report"]},{"url":"https://github.com/protocolbuffers/protobuf/pull/25587","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8063-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8063-2","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44512","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-0994","title":"Denial of Service in Python Protobuf","description":"A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.\n\nDue to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.","status":"published","published":"2026-01-23T14:55:16.876Z","modified":"2026-09-01T12:04:47.897Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L","level":"high","assessor":"cna"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-674","CWE-674"],"updated_at":"2026-11-02T14:20:13.587351Z"}],"euvd":[{"id":"EUVD-2026-4322","description":"A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.\n\nDue to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.","status":"published","published":"2026-01-23T14:55:16Z","modified":"2026-09-01T12:04:47Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L","level":"high"}],"updated_at":"2026-11-02T18:01:19.285273Z"}],"ghsa":[{"id":"GHSA-7gcm-g887-7qv7","title":"protobuf affected by a JSON recursion depth bypass","description":"A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.\n\nDue to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.","status":"published","published":"2026-01-23T15:31:35Z","modified":"2026-02-05T15:47:46Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L","level":"high"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T14:39:23.728882Z"}],"nvd":[{"id":"CVE-2026-0994","description":"A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.\n\nDue to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.","status":"published","published":"2026-01-23T15:16:06.84Z","modified":"2026-09-01T13:18:07.523Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T14:12:04.423757Z"}],"osv":[{"id":"BELL-CVE-2026-0994","status":"published","published":"2026-01-27T06:07:24.328756Z","modified":"2026-09-05T10:49:20.755962Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:23.037038Z"},{"id":"CVE-2026-0994","title":"Denial of Service in Python Protobuf","description":"A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.\n\nDue to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.","status":"published","published":"2026-01-23T14:55:16.876Z","modified":"2026-10-28T02:30:31.525629062Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L","level":"high"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T15:44:53.490346Z"},{"id":"DEBIAN-CVE-2026-0994","description":"A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.  Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.","status":"published","published":"2026-01-23T15:16:06.84Z","modified":"2026-10-01T03:00:54.404052909Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:48.440897Z"},{"id":"GHSA-7gcm-g887-7qv7","title":"protobuf affected by a JSON recursion depth bypass","description":"A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.\n\nDue to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.","status":"published","published":"2026-01-23T15:31:35Z","modified":"2026-09-10T03:50:32.795512159Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L","level":"high"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T15:46:41.002603Z"},{"id":"OESA-2026-1432","title":"protobuf security update","description":"Security Fix(es):\n\nA denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.\n\nDue to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.(CVE-2026-0994)","status":"published","published":"2026-02-28T11:10:27Z","modified":"2026-08-18T01:19:34.936973635Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"PYSEC-2026-1805","title":"protobuf affected by a JSON recursion depth bypass","description":"A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.\n\nDue to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.","status":"published","published":"2026-07-07T16:03:20.164682Z","modified":"2026-07-07T17:48:07.140464416Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L","level":"high"}],"updated_at":"2026-11-02T15:52:55.06457Z"},{"id":"RHSA-2026:3059","title":"Red Hat Security Advisory: protobuf security update","status":"published","published":"2026-02-24T10:14:40Z","modified":"2026-09-01T10:18:43Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:3094","title":"Red Hat Security Advisory: protobuf security update","status":"published","published":"2026-02-24T10:14:46Z","modified":"2026-09-01T10:18:49Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:3095","title":"Red Hat Security Advisory: protobuf security update","status":"published","published":"2026-02-24T10:14:46Z","modified":"2026-09-01T10:18:49Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:3097","title":"Red Hat Security Advisory: protobuf security update","status":"published","published":"2026-02-24T10:14:47Z","modified":"2026-09-01T10:18:50Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:3218","title":"Red Hat Security Advisory: protobuf security update","status":"published","published":"2026-02-25T10:11:39Z","modified":"2026-09-01T10:18:53Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:3219","title":"Red Hat Security Advisory: protobuf security update","status":"published","published":"2026-02-25T10:11:39Z","modified":"2026-09-01T10:18:54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:3220","title":"Red Hat Security Advisory: protobuf security update","status":"published","published":"2026-02-25T10:11:40Z","modified":"2026-09-01T10:18:54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:3958","title":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update","status":"published","published":"2026-03-07T10:11:38Z","modified":"2026-10-20T10:08:41Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:3959","title":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update","status":"published","published":"2026-03-07T10:11:39Z","modified":"2026-10-20T10:08:42Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RLSA-2026:3094","title":"Important: protobuf security update","description":"The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.\n\nSecurity Fix(es):\n\n* python: protobuf: Protobuf: Denial of Service due to recursion depth bypass (CVE-2026-0994)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-02-24T18:56:34.668877Z","modified":"2026-02-24T19:15:44.044432Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:3095","title":"Important: protobuf security update","description":"The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.\n\nSecurity Fix(es):\n\n* python: protobuf: Protobuf: Denial of Service due to recursion depth bypass (CVE-2026-0994)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-02-24T18:54:11.875441Z","modified":"2026-02-24T19:15:42.875499Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"ROOT-APP-PYPI-CVE-2026-0994","title":"CVE-2026-0994 in protobuf - Patched by Root","description":"Root has patched CVE-2026-0994 in the protobuf package for Root:PyPI. Multiple fixed versions available.","status":"published","published":"2026-10-13T06:51:42Z","modified":"2026-10-13T07:15:04.970547969Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:27.940619Z"},{"id":"UBUNTU-CVE-2026-0994","description":"A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.","status":"published","published":"2026-01-23T15:16:00Z","modified":"2026-10-17T12:57:50.248136406Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:58.519486Z"},{"id":"ALSA-2026:3094","title":"Important: protobuf security update","description":"The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.  \n\nSecurity Fix(es):  \n\n  * python: protobuf: Protobuf: Denial of Service due to recursion depth bypass (CVE-2026-0994)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-02-23T00:00:00Z","modified":"2026-10-29T11:58:14.31173Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:3095","title":"Important: protobuf security update","description":"The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.  \n\nSecurity Fix(es):  \n\n  * python: protobuf: Protobuf: Denial of Service due to recursion depth bypass (CVE-2026-0994)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-02-23T00:00:00Z","modified":"2026-10-29T11:32:34.78588507Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"AZL-75830","title":"CVE-2026-0994 affecting package protobuf for versions less than 25.3-6","description":"A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.\n\nDue to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.","status":"published","published":"2026-01-23T15:16:06Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.456773Z"},{"id":"AZL-76481","title":"CVE-2026-0994 affecting package mysql for versions less than 8.0.45-2","description":"A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.\n\nDue to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.","status":"published","published":"2026-01-23T15:16:06Z","modified":"2026-04-21T04:39:04.021176Z","updated_at":"2026-11-02T15:28:09.747541Z"},{"id":"AZL-76487","title":"CVE-2026-0994 affecting package protobuf for versions less than 3.17.3-5","description":"A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.\n\nDue to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.","status":"published","published":"2026-01-23T15:16:06Z","modified":"2026-04-21T04:39:04.392721Z","updated_at":"2026-11-02T15:28:09.747541Z"},{"id":"AZL-76505","title":"CVE-2026-0994 affecting package pytorch for versions less than 2.0.0-14","description":"A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.\n\nDue to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.","status":"published","published":"2026-01-23T15:16:06Z","modified":"2026-04-21T04:39:03.981288Z","updated_at":"2026-11-02T15:28:09.747541Z"},{"id":"AZL-76602","title":"CVE-2026-0994 affecting package pytorch for versions less than 2.2.2-12","description":"A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.\n\nDue to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.","status":"published","published":"2026-01-23T15:16:06Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.626116Z"},{"id":"CLSA-2026-1770768843","title":"TuxCare security update for protobuf (1 CVE)","description":"TuxCare rebuilt protobuf to address 1 CVE. Fixed in 4.25.8.post1+tuxcare.","status":"published","published":"2026-08-04T14:52:11Z","modified":"2026-10-20T13:45:20.329802925Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1772451263","title":"protobuf: Fix of CVE-2026-0994","description":"- CVE-2026-0994: recursion depth bypass in json_format.ParseDict","status":"published","published":"2026-03-04T11:20:08Z","modified":"2026-06-01T00:32:41.773177003Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1772453362","title":"protobuf: Fix of CVE-2026-0994","description":"- CVE-2026-0994: recursion depth bypass in json_format.ParseDict","status":"published","published":"2026-03-02T12:09:26Z","modified":"2026-06-01T00:31:46.601354536Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1787934757","title":"Fix CVE(s): CVE-2024-7254, CVE-2026-0994","description":"   * SECURITY UPDATE: Unbounded recursion when parsing nested groups in\n     protobuf-java\n     - debian/patches/CVE-2024-7254.patch: bound the depth of the\n       skipMessage()/skipField() recursion in CodedInputStream and of the\n       nested-group recursion in UnknownFieldSetLite with the existing\n       recursion limit, so a stream of nested SGROUP tags can no longer\n       exhaust the Java stack\n     - CVE-2024-7254\n   * SECURITY UPDATE: Nested Any messages bypass the JSON parser recursion\n     depth limit in python-protobuf\n     - debian/patches/CVE-2026-0994.patch: add max_recursion_depth accounting\n       to json_format and route nested well-known types in\n       _ConvertAnyMessage() through ConvertMessage() so the depth is tracked\n     - CVE-2026-0994","status":"published","published":"2026-08-28T18:16:32Z","modified":"2026-10-26T09:32:03.744522824Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1788858730","title":"TuxCare security update for protobuf (1 CVE)","description":"TuxCare rebuilt protobuf to address 1 CVE. Fixed in 4.24.3.post2+tuxcare.","status":"published","published":"2026-09-08T09:12:10Z","modified":"2026-10-15T09:48:01.710051346Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"CLSA-2026-1791188851","title":"TuxCare security update for protobuf (1 CVE)","description":"TuxCare rebuilt protobuf to address 1 CVE. Fixed in 4.25.9.post1+tuxcare.","status":"published","published":"2026-10-05T08:27:31Z","modified":"2026-10-15T09:47:42.010503806Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"openSUSE-SU-2026:10515-1","title":"libprotobuf-lite34_1_0-32bit-34.1-1.1 on GA media","description":"These are all security issues fixed in the libprotobuf-lite34_1_0-32bit-34.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-04-09T00:00:00Z","modified":"2026-04-10T09:46:21.504158Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:12274-1","title":"libonnxruntime1-1.31.0-1.1 on GA media","description":"These are all security issues fixed in the libonnxruntime1-1.31.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-26T00:00:00Z","modified":"2026-10-27T17:23:18.516421363Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"openSUSE-SU-2026:20390-1","title":"Security update for protobuf","description":"This update for protobuf fixes the following issues:\n\nSecurity fixes:\n\n- CVE-2025-4565: Fixed parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive\n  groups or messages that could lead to crash due to RecursionError (bsc#1244663).\n- CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173).\n\nOther fixes:\n\n- Fixed import issues of reverse-dependency packages within the google namespace (bsc#1244918).\n","status":"published","published":"2026-03-18T18:15:53Z","modified":"2026-03-26T17:23:49.861967Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2026:0374-1","title":"Security update for protobuf","description":"This update for protobuf fixes the following issues:\n\n- CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173).\n","status":"published","published":"2026-02-04T07:03:36Z","modified":"2026-03-23T04:52:11.494849Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0517-1","title":"Security update for protobuf","description":"This update for protobuf fixes the following issues:\n\n- CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173).\n","status":"published","published":"2026-02-14T08:25:01Z","modified":"2026-03-23T04:52:18.73817Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0563-1","title":"Security update for protobuf","description":"This update for protobuf fixes the following issues:\n\n- CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173).\n","status":"published","published":"2026-02-16T16:19:22Z","modified":"2026-02-17T15:45:50.299153Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0618-1","title":"Security update for protobuf","description":"This update for protobuf fixes the following issues:i\n\n- CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173).\n","status":"published","published":"2026-02-24T15:35:39Z","modified":"2026-02-26T16:16:52.954803Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:1653-1","title":"Security update for protobuf","description":"This update for protobuf fixes the following issues:\n\nRefresh fixes:\n\n- CVE-2025-4565: parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or\n  messages can lead to crash due to RecursionError (bsc#1244663).\n- CVE-2026-0994: `max_recursion_depth` limit can be bypassed when parsing nested `google.protobuf.Any` messages and lead\n  to the exhaustion of the Python recursion stack (bsc#1257173).\n","status":"published","published":"2026-04-29T00:45:31Z","modified":"2026-04-30T08:15:55.649357Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:20352-1","title":"Security update for protobuf","description":"This update for protobuf fixes the following issues:\n\n- CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173).\n","status":"published","published":"2026-02-13T16:56:15Z","modified":"2026-03-23T04:53:17.886549Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:20490-1","title":"Security update for protobuf","description":"This update for protobuf fixes the following issues:\n\n- CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173).\n","status":"published","published":"2026-02-17T09:42:22Z","modified":"2026-03-23T04:52:59.686706Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:20753-1","title":"Security update for protobuf","description":"This update for protobuf fixes the following issues:\n\nSecurity fixes:\n\n- CVE-2025-4565: Fixed parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive\n  groups or messages that could lead to crash due to RecursionError (bsc#1244663).\n- CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173).\n\nOther fixes:\n\n- Fixed import issues of reverse-dependency packages within the google namespace (bsc#1244918).\n","status":"published","published":"2026-03-18T18:11:52Z","modified":"2026-03-25T17:23:42.757739Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:20907-1","title":"Security update for protobuf","description":"This update for protobuf fixes the following issues:\n\nSecurity fixes:\n\n- CVE-2025-4565: Fixed parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive\n  groups or messages that could lead to crash due to RecursionError (bsc#1244663).\n- CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173).\n\nOther fixes:\n\n- Fixed import issues of reverse-dependency packages within the google namespace (bsc#1244918).\n","status":"published","published":"2026-03-18T18:11:52Z","modified":"2026-04-02T17:33:49.537243Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"USN-8063-1","title":"protobuf vulnerability","description":"It was discovered that Protocol Buffers incorrectly handled recursion when\nthe Python google.protobuf.json_format.ParseDict() function is being used.\nAn attacker could possibly use this issue to cause Protocol Buffers to\nconsume resources, resulting in a denial of service.","status":"published","published":"2026-02-25T12:38:01Z","modified":"2026-06-30T18:15:31.859704967Z","updated_at":"2026-11-02T16:58:22.951676Z"},{"id":"USN-8063-2","title":"protobuf vulnerability","description":"USN-8063-1 fixed a vulnerability in Protocol Buffers. This update provides\nthe corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that Protocol Buffers incorrectly handled recursion\n when the Python google.protobuf.json_format.ParseDict() function is  being\n used. An attacker could possibly use this issue to cause  Protocol Buffers\n to consume resources, resulting in a denial of  service.","status":"published","published":"2026-05-26T20:31:47Z","modified":"2026-06-30T18:15:32.31664766Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}