Go/google.golang.org/protobuf CVE-2024-24786: unknown, EPSS 1.26%

Infinite loop in JSON unmarshaling in google.golang.org/protobuf

Action: Upgrade google.golang.org/protobuf to 1.33.0 or later.

go get google.golang.org/protobuf@v1.33.0

Affected

Fixed versions

Sources

• osv: GO-2024-2611
• https://go.dev/cl/569356

CVE-2024-24786 · published 2024-03-05T20:24:05Z · modified 2026-10-14T10:56:59.752145684Z · JSON