CVE-2026-0994

2 advisories.

PyPI/protobuf CVE-2026-0994: high, EPSS 0.71%

protobuf affected by a JSON recursion depth bypass

Action: Upgrade protobuf to 5.29.6 or later.

pip install protobuf==6.33.5

pip install protobuf==5.29.6

introduced	fixed	last affected
6.30.0rc1	6.33.5	-
0	5.29.6	-

6.33.5

5.29.6

CVE-2026-0994 · published 2026-01-23T15:31:35Z · modified 2026-09-10T03:50:32.795512159Z · JSON

protobuf affected by a JSON recursion depth bypass

Action: Upgrade protobuf to 5.29.6 or later.

pip install protobuf==5.29.6

pip install protobuf==6.33.5

introduced	fixed	last affected
0	5.29.6	-
6.30.0rc1	6.33.5	-

5.29.6

6.33.5

CVE-2026-0994 · published 2026-07-07T16:03:20.164682Z · modified 2026-07-07T17:48:07.140464416Z · JSON