Skip to content
Google Protobuf-java vulnerabilities
-
google protobuf-javascript (aka google-protobuf npm package)
Uncontrolled Recursion leading to Denial of Service in protobuf-javascript (google-protobuf)
CVE-2026-89418
Fix available
8.7 High
-
google protobuf, protocol buffers, google-protobuf [jruby gem] +8 more +10 more
Stack overflow in Protocol Buffers Java Lite
CVE-2024-7254
Fix available
8.7 High
-
google protobuf-java, protobuf-javalite, protocolbuffers +2 more
Parsing issue in protobuf message-type extension
CVE-2022-3510
Fix available
7.5 High
-
google protobuf-java, protobuf-javalite, protocolbuffers +2 more
Parsing issue in protobuf textformat
CVE-2022-3509
Public exploitFix available
7.5 High
-
google protobuf-java, protocolbuffers, fedoraproject fedora +4 more +6 more
Memory handling vulnerability in ProtocolBuffers Java core and lite
CVE-2022-3171
Fix available
4.3 Medium
-
google protobuf-java, google-protobuf, google-protobuf [jruby gem] +5 more +7 more
Denial of Service of protobuf-java parsing procedure
CVE-2021-22569
Public exploitFix available
7.5 High