Login Request a demo
PR
Product
protobuf-java
by Google · last CVE Sep 19, 2024
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 4Medium 1Low 0
Severity
All severities5Critical0High4Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add protobuf-java to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-7254
7.5
3%
Sep 19
Stack overflow in Protocol Buffers Java Lite
Affected: before 3.25.5; before 4.27.5; before 4.28.2
CVE-2022-3510
7.5
1%
Dec 12
A parsing issue similar to CVE-2022-3171, but with Message-Type Extensions in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial…
Affected: 3.16.0 before 3.16.3; 3.19.0 before 3.19.6; 3.20.0 before 3.20.3; 3.21.0 before 3.21.7
CVE-2022-3509
7.5
1%
Dec 12
A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service…
Affected: 3.16.0 before 3.16.3; 3.19.0 before 3.19.6; 3.20.0 before 3.20.3; 3.21.0 before 3.21.7
CVE-2022-3171
7.5
1%
Oct 12
Memory handling vulnerability in ProtocolBuffers Java core and lite
Affected: before 3.16.3; 3.17.0 before 3.19.6; 3.20.0 before 3.20.3; 3.21.0 before 3.21.7
Showing 4