Current section
2 Advisories
Jump to
Current section
2 Advisories
Uncontrolled recursion in elixir-protobuf/protobuf JSON decoding of self-referential messages
Affected Versions
References
- https://cna.erlef.org/cves/CVE-2026-104635.html
- https://github.com/elixir-protobuf/protobuf/commit/b0a1d4eaffaf50012fa71a8e931a47cf252d0370
- https://github.com/elixir-protobuf/protobuf/commit/e9432ad1c4099511905353cebcececa3a1f7c3ff
- https://github.com/elixir-protobuf/protobuf/security/advisories/GHSA-m497-c2h9-rvw6
- https://hex.pm/packages/protobuf
Protobuf: Unbounded recursion depth in embedded-message decoding
Affected Versions
References
- https://github.com/elixir-protobuf/protobuf
- https://github.com/elixir-protobuf/protobuf/commit/21ec7c5bec4fec74e10c1de0d5d1a2d8152ac5d4
- https://github.com/elixir-protobuf/protobuf/commit/b8efa97790eece3d2d0e8e7c31a45ed409fe5338
- https://github.com/elixir-protobuf/protobuf/security/advisories/GHSA-rv48-qqj5-crxg
Checksum
Dependency Config
mix.exs
rebar.config
Gleam
erlang.mk
Package Details
this version
41 820
yesterday
39 822
last 7 days
157 126
all time
25 141 731