Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-53605
5.9
MEDIUMCVSS v3
Published
July 5, 2025
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::coded_input_stream::CodedInputStream::skip_group parsing of unknown fields in untrusted input.
Crates.io
GitHub