8.2
Élevée
CVE-2025-4565 Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary…
Description
Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit. This can result in a Denial of service by crashing the application with a RecursionError. We recommend upgrading to version =>6.31.1 or beyond commit 17838beda2943d08b8a9d4df5b68f5f04f26d901
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Python-Protobuf 6.31 | premières → < 6.31.1 | 6.31.1 |
| Python-Protobuf 5.29 | premières → < 5.29.5 | 5.29.5 |
| Python-Protobuf 4.25 | premières → < 4.25.8 | 4.25.8 |