Vulnerability Report: GO-2024-2611
- CVE-2024-24786, GHSA-8r3f-844c-mc37
- Affects: google.golang.org/protobuf
- Published: Mar 05, 2024
- Modified: Apr 05, 2024
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.
Affected Packages
-
PathVersionsSymbols
-
before v1.33.0
-
before v1.33.0
Aliases
References
Feedback
See anything missing or incorrect?
Suggest an edit to this report.