google/protobuf vulnerabilities (Packagist)

2 vulnerabilities.

• google/protobuf Packagist Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input CVE-2026-6409 Fix available 7.1 HighMarch 25, 2026
• google/protobuf Packagist protobuf susceptible to buffer overflow CVE-2015-5237 Fix available 8.8 HighSeptember 25, 2017