{"action":"Upgrade io.github.ascopes:protobuf-maven-plugin to 3.10.2 (3.x) or 4.0.2 (4.x) or later.","affected":[{"fixed":"4.0.2","introduced":"4.0.0"},{"fixed":"3.10.2","introduced":"0"}],"component":"io.github.ascopes:protobuf-maven-plugin","cve_ids":[],"ecosystem":"Maven","exploited":false,"fixed_versions":["4.0.2","3.10.2"],"ghsa_id":"GHSA-j2pc-v64r-mv4f","id":"tcs_01M5N91SWHE48KCJY6TPG10DXC","modified_at":"2025-11-15T04:13:12.521811Z","published_at":"2025-11-04T15:48:09Z","references":["https://osv.dev/vulnerability/GHSA-j2pc-v64r-mv4f","https://github.com/ascopes/protobuf-maven-plugin/security/advisories/GHSA-j2pc-v64r-mv4f","https://github.com/ascopes/protobuf-maven-plugin/commit/d3330e7038a296fe595c5470a22019eb70e35b07","https://github.com/ascopes/protobuf-maven-plugin"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-j2pc-v64r-mv4f","url":"https://osv.dev/vulnerability/GHSA-j2pc-v64r-mv4f"}],"summary":"Protobuf Maven Plugin protocDigest is ignored when using protoc from PATH"}