GHSA-hw7c-3rfg-p46j
GitHub Security Advisory
google.golang.org/protobuf vulnerable to panic leading to denial of service
✓ GitHub Reviewed
HIGH
Has CVE
Advisory Details
Parsing invalid messages can panic.
Parsing a text-format message which contains a potential number consisting of a minus sign, one or more characters of whitespace, and no further input will cause a panic.
Affected Packages
Go
google.golang.org/protobuf
Affected versions:
1.29.0
(fixed in 1.29.1)
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: July 18, 2025 6:27 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.