Google Google-protobuf vulnerabilities

• google protobuf-javascript (aka google-protobuf npm package) Uncontrolled Recursion leading to Denial of Service in protobuf-javascript (google-protobuf) CVE-2026-89418 Fix available 8.7 HighSeptember 17, 2026
• google protobuf, protocol buffers, google-protobuf [jruby gem] +8 more +10 more Stack overflow in Protocol Buffers Java Lite CVE-2024-7254 Fix available 8.7 HighSeptember 19, 2024
• google protobuf-java, protocolbuffers, fedoraproject fedora +4 more +6 more Memory handling vulnerability in ProtocolBuffers Java core and lite CVE-2022-3171 Fix available 4.3 MediumOctober 4, 2022
• google protobuf-java, google-protobuf, google-protobuf [jruby gem] +5 more +7 more Denial of Service of protobuf-java parsing procedure CVE-2021-22569 Public exploitFix available 7.5 HighJanuary 7, 2022