protobuf vulnerabilities

2 known vulnerabilities in protobuf from Elixir-protobuf. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  protobuf: Uncontrolled Recursion

  CVE-2026-104635Oct 9, 2026Elixir-protobuf

  Uncontrolled Recursion vulnerability in Protobuf.JSON.Decode in elixir-protobuf protobuf allows an unauthenticated remote attacker to crash the decoding process via a deeply nested JSON document. Any application that decodes attacker-supplied JSON with Protobu

• 8.2 High severity

  protobuf: Uncontrolled Recursion

  CVE-2026-54451Sep 17, 2026Elixir-protobuf

  Elixir protobuf is a pure Elixir implementation of Google Protobuf. From 0.8.0 until 0.16.1, services that decode attacker-controlled protobuf bytes with Protobuf.Decoder can be taken offline when the schema contains a self-referential or cyclic message type.