An open index of dependabot pull requests across open source projects.

com.google.protobuf:protobuf-java

Ecosystem:
maven
Package URL:
pkg:maven/com.google.protobuf:protobuf-java
Total PRs:
1,452 Dependabot PRs
Latest PR:
17 days ago
Unique Repositories:
468 repositories
Unique Repos (30 days):
5 repositories
Security Advisories
protobuf-java has a potential Denial of Service issue
GHSA-h4h5-3hr4-j3g2 CVE-2022-3171 MODERATE published almost 4 years ago • updated about 20 hours ago
## Summary A potential Denial of Service issue in `protobuf-java` core and lite was discovered in the parsing procedure for binary and text format ...
A potential Denial of Service issue in protobuf-java
GHSA-wrvw-hg22-4m67 CVE-2021-22569 HIGH published over 4 years ago • updated about 20 hours ago
## Summary A potential Denial of Service issue in protobuf-java was discovered in the parsing procedure for binary data. Reporter: [OSS-Fuzz](htt...
protobuf-java has potential Denial of Service issue
GHSA-735f-pc8j-v9w8 CVE-2024-7254 HIGH published almost 2 years ago • updated about 19 hours ago
### Summary When parsing unknown fields in the Protobuf Java Lite and Full library, a maliciously crafted message can cause a StackOverflow error a...
Protobuf Java vulnerable to Uncontrolled Resource Consumption
GHSA-g5ww-5jh7-63cx CVE-2022-3509 HIGH published over 3 years ago • updated about 9 hours ago
A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 ca...
Protobuf Java vulnerable to Uncontrolled Resource Consumption
GHSA-4gg5-vx3j-xwc7 CVE-2022-3510 HIGH published over 3 years ago • updated about 9 hours ago
A parsing issue similar to CVE-2022-3171, but with Message-Type Extensions in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 ...
Recent PRs
Bump the maven group with 11 updates

google/gson #3022

4.34.0 → 4.34.1 Patch PR
Closed 3 months ago 2 comments
google
Package Details
Name: com.google.protobuf:protobuf-java
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/com.google.protobuf:protobuf-java
JSON API: View JSON
Security Advisories

5

Active advisories
HIGH 4
MODERATE 1
View All maven Advisories
Package Information
Description:

Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.

Repository: https://github.com/protocolbuffers/protobuf
Homepage: https://developers.google.com/protocol-buffers/
Latest Release: 4.31.1
about 1 year ago
Dependent Repos: 38,630
Dependent Packages: 5,130
Ranking: Top 0.025% by dependent repos Top 0.0144% by dependent pkgs
PR Status
Open 564 (38.8%)
Merged 250 (17.2%)
Closed 453 (31.2%)
PR Types
Major 353 (24.3%)
Minor 592 (40.8%)
Patch 322 (22.2%)