golang/protobuf
GitHub
Releases22
Frequency3 months 2 weeks
Last Release
Stars10.1K
Go support for Google's protocol buffers
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| = 1.29.0 | 7.5 HIGH | — | ||
Parsing invalid messages can panic. Parsing a text-format message which contains a potential number consisting of a minus sign, one or more characters of whitespace, and no further input will cause a panic. | ||||
| < 1.3.2 | 8.6 HIGH | 7.5 HIGH | ||
An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarshal/unmarshal.go lacks certain index validation, aka the "skippy peanut butter" issue. | ||||