Threats affecting pkg:golang/google.golang.org/protobuf/encoding/protojson

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 1.3%	CVE-2024-24786google.golang.org/protobuf/encoding/protojson · Improper Validation of Syntactic Correctness of Input High7.5EPSS 1.3%2024-03-05CVE Database V5CVE-2024-24786 The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set. EPSS 1.3%Vulnerability CWE-1286	CVE Database V5	2024-03-05

Page 1 of 1