redhat/python3x-protobuf vulnerabilities

Latest redhat/python3x-protobuf CVEs

Newest publication first

1. CVE-2026-102554 Denial of Service via Eager Array Allocation During Deserialization in Guava

   Published 2026-10-09

   High·CVSS 8.2 EPSS 0.35%

   Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerIntern...

2. CVE-2026-0994 Denial of Service in Python Protobuf

   Published 2026-01-23

   High·CVSS 8.2

   A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling lo...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.