Elixir-protobuf vulnerabilities
We track 2 vulnerabilities in Elixir-protobuf products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 9, 2026.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Elixir-protobuf vulnerabilities
- 8.2 High severity
protobuf: Uncontrolled Recursion
Uncontrolled Recursion vulnerability in Protobuf.JSON.Decode in elixir-protobuf protobuf allows an unauthenticated remote attacker to crash the decoding process via a deeply nested JSON document. Any application that decodes attacker-supplied JSON with Protobu
- 8.2 High severity
protobuf: Uncontrolled Recursion
Elixir protobuf is a pure Elixir implementation of Google Protobuf. From 0.8.0 until 0.16.1, services that decode attacker-controlled protobuf bytes with Protobuf.Decoder can be taken offline when the schema contains a self-referential or cyclic message type.