Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

com.google.protobuf:protobuf-java

Ecosystem:
maven
Package URL:
pkg:maven/com.google.protobuf:protobuf-java
Total PRs:
1,102 Dependabot PRs
Latest PR:
about 4 hours ago
Unique Repositories:
381 repositories
Unique Repos (30 days):
153 repositories
Security Advisories
Protobuf Java vulnerable to Uncontrolled Resource Consumption
GHSA-g5ww-5jh7-63cx CVE-2022-3509 HIGH published almost 3 years ago • updated 4 months ago
A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 ca...
NULL Pointer Dereference in Protocol Buffers
GHSA-77rm-9x9h-xj3g CVE-2021-22570 HIGH published over 3 years ago • updated 2 months ago
Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto fi...
A potential Denial of Service issue in protobuf-java
GHSA-wrvw-hg22-4m67 CVE-2021-22569 HIGH published over 3 years ago • updated about 2 months ago
## Summary A potential Denial of Service issue in protobuf-java was discovered in the parsing procedure for binary data. Reporter: [OSS-Fuzz](htt...
protobuf-java has potential Denial of Service issue
GHSA-735f-pc8j-v9w8 CVE-2024-7254 HIGH published about 1 year ago • updated 2 months ago
### Summary When parsing unknown fields in the Protobuf Java Lite and Full library, a maliciously crafted message can cause a StackOverflow error a...
Protobuf Java vulnerable to Uncontrolled Resource Consumption
GHSA-4gg5-vx3j-xwc7 CVE-2022-3510 HIGH published almost 3 years ago • updated about 2 months ago
A parsing issue similar to CVE-2022-3171, but with Message-Type Extensions in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 ...
View all 6 advisories
Recent PRs
RSS Feed
Bump com.google.protobuf:protobuf-java from 4.32.0 to 4.32.1 in /java

gchq/sleeper #5638

4.32.0 → 4.32.1 Patch PR
Open 19 days ago
gchq
Bump com.google.protobuf:protobuf-java from 4.32.0 to 4.32.1

meks77/quarkus-axonframework-extension #278

4.32.0 → 4.32.1 Patch PR
Merged 19 days ago
meks77
Bump com.google.protobuf:protobuf-java from 3.20.3 to 4.32.1 in /services

GoogleCloudPlatform/bq-pii-classifier #212

3.20.3 → 4.32.1 Major PR
Open 19 days ago
GoogleCloudPlatform
Bump com.google.protobuf:protobuf-java from 4.32.0 to 4.32.1

ArpNetworking/metrics-cluster-aggregator #538

4.32.0 → 4.32.1 Patch PR
Open 19 days ago
ArpNetworking
Bump com.google.protobuf:protobuf-java from 4.30.1 to 4.32.1

jameshnsears/Chance #311

4.30.1 → 4.32.1 Minor PR
Open 19 days ago
jameshnsears
chore(deps): bump com.google.protobuf:protobuf-java from 4.32.0 to 4.32.1

apache/plc4x-extras #478

4.32.0 → 4.32.1 Patch PR
Open 19 days ago
apache
Bump com.google.protobuf:protobuf-java from 4.32.0 to 4.32.1 in /build-caching-maven-samples

gradle/develocity-build-config-samples #1997

4.32.0 → 4.32.1 Patch PR
Merged 19 days ago
gradle
build(deps): bump com.google.protobuf:protobuf-java from 4.32.0 to 4.32.1

kubernetes-client/java #4246

4.32.0 → 4.32.1 Patch PR
Open 19 days ago 1 comment
kubernetes-client
build(deps): bump com.google.protobuf:protobuf-java from 3.25.5 to 4.32.1

cryostatio/cryostat #1045

3.25.5 → 4.32.1 Major PR
Open 19 days ago
cryostatio
Bump com.google.protobuf:protobuf-java from 4.32.0 to 4.32.1

FraunhoferIOSB/FAAAST-Registry #338

4.32.0 → 4.32.1 Patch PR
Open 19 days ago 1 comment
FraunhoferIOSB
Bump com.google.protobuf:protobuf-java from 4.32.0 to 4.32.1

InscopeMetrics/client-protocol #47

4.32.0 → 4.32.1 Patch PR
Merged 19 days ago
InscopeMetrics
Bump com.google.protobuf:protobuf-java from 4.32.0 to 4.32.1 in /pgp-keys-map-test1

s4u/pgp-keys-map #3128

4.32.0 → 4.32.1 Patch PR
Open 19 days ago
s4u
Bump com.google.protobuf:protobuf-java from 4.31.1 to 4.32.1

brotalkmc/AgonesSDK #26

4.31.1 → 4.32.1 Minor PR
Open 19 days ago
brotalkmc
build(deps): bump com.google.protobuf:protobuf-java from 4.31.1 to 4.32.1

regadas/trino-pubsub-event-listener #340

4.31.1 → 4.32.1 Minor PR
Merged 19 days ago
regadas
Bump com.google.protobuf:protobuf-java from 4.29.0 to 4.32.1

scx567888/live-room-watcher #399

4.29.0 → 4.32.1 Minor PR
Closed 19 days ago 1 comment
scx567888
Bump com.google.protobuf:protobuf-java from 4.32.0 to 4.32.1

ArpNetworking/metrics-aggregator-protocol #56

4.32.0 → 4.32.1 Patch PR
Merged 19 days ago
ArpNetworking
build(deps): bump com.google.protobuf:protobuf-java from 4.32.0 to 4.32.1

horitaku1124/sql_minus #184

4.32.0 → 4.32.1 Patch PR
Open 19 days ago
horitaku1124
Bump com.google.protobuf:protobuf-java from 4.32.0 to 4.32.1

ArpNetworking/open-telemetry-protocol #113

4.32.0 → 4.32.1 Patch PR
Open 19 days ago
ArpNetworking
Bump com.google.protobuf:protobuf-java from 3.23.4 to 4.32.1 in /java

SJSU-CS-systems-group/DDD-libsignal-protocol-java #19

3.23.4 → 4.32.1 Major PR
Open 19 days ago
SJSU-CS-systems-group
Bump com.google.protobuf:protobuf-java from 4.32.0 to 4.32.1

mustangxu/playground #319

4.32.0 → 4.32.1 Patch PR
Merged 19 days ago
mustangxu
Bump com.google.protobuf:protobuf-java from 4.32.0 to 4.32.1

hendisantika/springboot-protobuf-example2 #38

4.32.0 → 4.32.1 Patch PR
Merged 19 days ago
hendisantika
Bump com.google.protobuf:protobuf-java from 4.32.0 to 4.32.1 in /spring-boot-serialization-producer

hendisantika/springboot-protobuf #68

4.32.0 → 4.32.1 Patch PR
Merged 19 days ago
hendisantika
Bump com.google.protobuf:protobuf-java from 4.32.0 to 4.32.1 in /spring-boot-serialization-consumer

hendisantika/springboot-protobuf #67

4.32.0 → 4.32.1 Patch PR
Merged 19 days ago
hendisantika
Bump com.google.protobuf:protobuf-java from 3.24.4 to 3.25.5

baulea/zerocode #5

3.24.4 → 3.25.5 Minor PR
Open 21 days ago
baulea
Bump com.google.protobuf:protobuf-java from 3.24.4 to 3.25.5

riemann/riemann-java-client #106

3.24.4 → 3.25.5 Minor PR
Open 22 days ago 1 comment
riemann
Bump the maven group across 2 directories with 2 updates

modded-android/external #2

3.19.2 → 3.25.5 Minor PR
Open 22 days ago
modded-android
Bump com.google.protobuf:protobuf-java from 4.31.1 to 4.32.0

session-foundation/session-android #1490

4.31.1 → 4.32.0 Minor PR
Closed 22 days ago 1 comment
session-foundation
chore(deps): bump the maven-dependencies group across 1 directory with 5 updates

callng/QQHook #18

4.31.1 → 4.32.0 Minor PR
Merged 22 days ago
callng
deps(java): bump the all group across 1 directory with 21 updates

VectorAgents/wren-engine #9

4.30.2 → 4.32.0 Minor PR
Open 23 days ago 1 comment
VectorAgents
Bump the maven group across 3 directories with 6 updates

RonanB96/tensorflow #1

3.5.1 → 3.25.5 Minor PR
Open 25 days ago
RonanB96
Bump com.google.protobuf:protobuf-java from 3.12.2 to 4.32.0

shoucheng3/kubernetes-client__java_CVE-2020-8570_client-java-parent-9_0_2_fixed #4

3.12.2 → 4.32.0 Major PR
Open 25 days ago
shoucheng3
chore(deps): bump com.google.protobuf:protobuf-java from 3.25.2 to 4.32.0

tctalk-cn/akhq #16

3.25.2 → 4.32.0 Major PR
Open 25 days ago 2 comments
tctalk-cn
build(deps): bump com.google.protobuf:protobuf-java from 3.25.5 to 4.32.0

debmalya-dey/citadel-new-source #1

3.25.5 → 4.32.0 Major PR
Open 26 days ago 1 comment
debmalya-dey
chore(deps): bump the maven group across 14 directories with 6 updates

hugegraph/hugegraph #31

3.21.7 → 3.25.5 Minor PR
Open 26 days ago 5 comments
hugegraph
build(deps): bump com.google.protobuf:protobuf-java from 4.0.0-rc-2 to 4.27.5 in /projects/opencensus-java/project-parent/fuzz-targets

osiegmar/oss-fuzz #5

4.0.0-rc-2 → 4.27.5 Minor PR
Open 27 days ago
osiegmar
chore(deps): bump com.google.protobuf:protobuf-java from 3.25.1 to 3.25.5

googleapis/java-genai #526

3.25.1 → 3.25.5 Patch PR
Open 27 days ago
googleapis
Bump com.google.protobuf:protobuf-java from 3.5.1 to 3.25.5 in /tensorflow/java/maven/proto

anandnk24/tensorflow #2

3.5.1 → 3.25.5 Minor PR
Open 27 days ago
anandnk24
Bump com.google.protobuf:protobuf-java from 3.5.1 to 3.25.5

hixio-mh/cantaloupe #94

3.5.1 → 3.25.5 Minor PR
Open 27 days ago
hixio-mh
Bump com.google.protobuf:protobuf-java from 3.16.1 to 3.25.5

variflight/feeyo-nio #7

3.16.1 → 3.25.5 Minor PR
Open 27 days ago
variflight
Bump com.google.protobuf:protobuf-java from 3.0.0-beta-2 to 3.25.5

ast-security/sonarqube #13

3.0.0-beta-2 → 3.25.5 Minor PR
Open 27 days ago
ast-security
Bump com.google.protobuf:protobuf-java from 3.10.0 to 3.25.5 in /03.Sentinel Lab/sentinel-1.7.2/sentinel-cluster/sentinel-cluster-server-envoy-rls

a5535772/labs #18

3.10.0 → 3.25.5 Minor PR
Open 27 days ago
a5535772
Bump com.google.protobuf:protobuf-java from 3.5.1 to 3.25.5 in /tensorflow/java/maven/tensorflow-hadoop

hixio-mh/tensorflow #69

3.5.1 → 3.25.5 Minor PR
Open 27 days ago
hixio-mh
Bump com.google.protobuf:protobuf-java from 4.0.0-rc-2 to 4.27.5

D-moe/Protobuf #1

4.0.0-rc-2 → 4.27.5 Minor PR
Open 27 days ago
D-moe
Bump com.google.protobuf:protobuf-java from 3.8.0 to 3.25.5 in /geaflow

apache/geaflow #613

3.8.0 → 3.25.5 Minor PR
Open 27 days ago
apache
Bump the maven group across 2 directories with 3 updates

offsoc/Wukong_nocode #1

3.13.0 → 3.25.5 Minor PR
Open 27 days ago
offsoc
Bump the maven group across 8 directories with 16 updates

Silvrbckw/CoinExchange_CryptoExchange_Java #30

3.6.0 → 3.25.5 Minor PR
Open 27 days ago
Silvrbckw
Bump the maven group across 2 directories with 3 updates

offsoc/Wukong_ProjectManagement #1

3.13.0 → 3.25.5 Minor PR
Open 27 days ago
offsoc
Bump com.google.protobuf:protobuf-java from 4.0.0-rc-2 to 4.27.5 in /function-images/springboot

vhive-serverless/vHive #1130

4.0.0-rc-2 → 4.27.5 Minor PR
Open 27 days ago
vhive-serverless
Bump com.google.protobuf:protobuf-java from 4.29.3 to 4.32.0

entur/interface-protoc-plugin #78

4.29.3 → 4.32.0 Minor PR
Closed 27 days ago 1 comment
entur
Bump com.google.protobuf:protobuf-java from 4.29.3 to 4.32.0[skip ci]

entur/netex-protobuf #378

4.29.3 → 4.32.0 Minor PR
Merged 27 days ago
entur
Package Details
Name: com.google.protobuf:protobuf-java
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/com.google.protobuf:protobuf-java
JSON API: View JSON
Security Advisories

6

Active advisories
HIGH 5
MODERATE 1
View All maven Advisories
Package Information
Description:

Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.

Repository: https://github.com/protocolbuffers/protobuf
Homepage: https://developers.google.com/protocol-buffers/
Latest Release: 4.31.1
4 months ago
Dependent Repos: 38,630
Dependent Packages: 5,130
Ranking: Top 0.025% by dependent repos Top 0.0144% by dependent pkgs
PR Status
Open 436 (39.6%)
Merged 228 (20.7%)
Closed 253 (23.0%)
PR Types
Major 256 (23.2%)
Patch 219 (19.9%)
Minor 442 (40.1%)