Nixpkgs Security Tracker

Login with GitHub

Suggestions search

All statuses
Filter by:
With package: php82Extensions.protobuf

Found 1 matching suggestions

View:
Compact
Detailed
Untriaged
Permalink CVE-2025-4565
created 6 months ago
Unbounded recursion in Python Protobuf

Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit. This can result in a Denial of service by crashing the application with a RecursionError. We recommend upgrading to version =>6.31.1 or beyond commit 17838beda2943d08b8a9d4df5b68f5f04f26d901

References

Affected products

protobuf
  • <4.25.8
  • <6.31.1
  • <5.29.5
Python-Protobuf
  • <4.25.8
  • <6.31.1
  • <5.29.5

Matching in nixpkgs

pkgs.protobufc

C bindings for Google's Protocol Buffers

  • nixos-unstable -

pkgs.go-protobuf

Go bindings for protocol buffer

  • nixos-unstable -

pkgs.protobuf_21

Google's data interchange format

  • nixos-unstable -

pkgs.protobuf_25

Google's data interchange format

  • nixos-unstable -

pkgs.protobuf_27

Google's data interchange format

  • nixos-unstable -

pkgs.protobuf_29

Google's data interchange format

  • nixos-unstable -

pkgs.protobuf_30

Google's data interchange format

  • nixos-unstable -

pkgs.protobuf_31

Google's data interchange format

  • nixos-unstable -

pkgs.protobuf_32

Google's data interchange format

  • nixos-unstable -

pkgs.mypy-protobuf

Generate mypy stub files from protobuf specs

  • nixos-unstable -

pkgs.php81Extensions.protobuf

Google's language-neutral, platform-neutral, extensible mechanism for serializing structured data

  • nixos-unstable -

pkgs.php82Extensions.protobuf

Google's language-neutral, platform-neutral, extensible mechanism for serializing structured data

  • nixos-unstable -

pkgs.php83Extensions.protobuf

Google's language-neutral, platform-neutral, extensible mechanism for serializing structured data

  • nixos-unstable -

pkgs.php84Extensions.protobuf

Google's language-neutral, platform-neutral, extensible mechanism for serializing structured data

  • nixos-unstable -

Package maintainers