protobuf
Hex2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting protobufpage 1 of 1
- CVE-2026-104635HIGHCVSS 8.2EG 8.2fixed in 0.17.12026-10-09
vulnerable: 0.10.0 ... 0.9.0 (12 versions)
Uncontrolled Recursion vulnerability in Protobuf.JSON.Decode in elixir-protobuf protobuf allows an unauthenticated remote attacker to crash the decoding process via a deeply nested JSON document. Any application that decodes attacker-suppl…
- CVE-2026-54451HIGHCVSS 8.2EG 8.2fixed in 0.16.12026-07-15
vulnerable: 0.10.0 ... 0.9.0 (10 versions)
Elixir protobuf is a pure Elixir implementation of Google Protobuf. From 0.8.0 until 0.16.1, services that decode attacker-controlled protobuf bytes with Protobuf.Decoder can be taken offline when the schema contains a self-referential or …
Check whether protobuf is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for protobuf CVEs against the assets you own.
Book a Demo →