{"action":"Upgrade protobuf to 3.7.2 or later.","affected":[{"fixed":"3.7.2","introduced":"0.0.0-0"}],"component":"protobuf","cve_ids":["CVE-2025-53605"],"ecosystem":"crates.io","epss":0.00473,"exploited":false,"fixed_versions":["3.7.2"],"ghsa_id":"GHSA-2gh3-rmm4-6rq5","id":"tcs_01M5KF9MY1GSPV2NGDQSSEVVQP","modified_at":"2026-02-04T02:24:04.262379Z","published_at":"2024-12-12T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2024-0437","https://crates.io/crates/protobuf","https://rustsec.org/advisories/RUSTSEC-2024-0437.html","https://github.com/stepancheg/rust-protobuf/issues/749"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"RUSTSEC-2024-0437","url":"https://osv.dev/vulnerability/RUSTSEC-2024-0437"},{"source":"nvd","source_id":"CVE-2025-53605","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-53605"}],"summary":"Crash due to uncontrolled recursion in protobuf crate"}