The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit. This can result in a Denial of service by crashing the application with a RecursionError. We recommend upgrading to version =>6.31.1 or beyond commit 17838beda2943d08b8a9d4df5b68f5f04f26d901
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade protobuf | Jun 20, 2025 | Jun 16, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade protobuf-compilerUpgrade protobuf | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade protobufUpgrade protobuf-compiler | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade protobufUpgrade protobuf-compiler | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade protobuf-compilerUpgrade protobuf | Oct 24, 2025 | Sep 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 16, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 9.3.10 | Mar 20, 2026 | Jun 16, 2025 |
| Suse | — | Upgrade libprotobuf25_1_0Upgrade libprotobuf-lite25_1_0-32bitUpgrade python311-protobufUpgrade protobuf-develUpgrade protobuf-java-parentUpgrade libprotoc25_1_0Upgrade protobuf-javaUpgrade protobuf-java-bomUpgrade libprotobuf-lite25_1_0Upgrade libprotobuf20Upgrade python3-protobufUpgrade libprotoc25_1_0-32bitUpgrade libprotobuf25_1_0-32bit | Jul 16, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade python3-protobuf (Ubuntu Pro)Upgrade libprotobuf-javaUpgrade python3-protobufUpgrade python-protobuf (Ubuntu Pro)Upgrade libprotobuf-java (Ubuntu Pro) | Jul 1, 2025 | Jun 16, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub