io.github.ascopes vulnerabilities

Products

• io.github.ascopes/protobuf-maven-plugin 1

Latest io.github.ascopes CVEs

Newest publication first

1. GHSA-j2pc-v64r-mv4f Protobuf Maven Plugin protocDigest is ignored when using protoc from PATH

   Published 2025-11-04

   Low·CVSS 1.0

   Summary The expected protocDigest is ignored when protoc is taken from the PATH. Details The documentation for the protocDigest parameter says: ... Users may wish to specify this if using a PATH-based binary ... However, when specifying <protoc>PATH</protoc> the protocDigest is n...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.