Most recent entries from all

bdu:2026-05693

2026-10-04T00:09:36.740510+00:00

bdu:2026-05693

Withdrawn: CLEANSTART-2026-RA10016 — Security fixes in ztunnel-fips 1.27.8-r4

2026-10-04T00:09:36.740587+00:00

Withdrawn by the publisher.

Affected: CleanStart: ztunnel-fips

Package ztunnel-fips version 1.27.8-r4 fixes 9 vulnerabilities: CVE-2026-25541, CVE-2025-53605, CVE-2026-25727, CVE-2024-7254, ghsa-82j2-j2ch-gfr8...

EUVD-2026-246690

2026-10-04T00:09:36.740657+00:00

EUVD-2026-246690

fkie_cve-2025-53605

2026-10-04T00:09:36.740671+00:00

The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::coded_input_stream::CodedInputStream::skip_group parsing of unknown fields in untrusted input.

GHSA-2gh3-rmm4-6rq5 — Crash due to uncontrolled recursion in protobuf crate

2026-10-04T00:09:36.740702+00:00

Affected: crates.io: protobuf

Affected version of this crate did not properly parse unknown fields when parsing a user-supplied input.

This allows an attacker to cause a stack overflow when parsing the message on untrusted data.

msrc_CVE-2025-53605 — The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::coded_input_stream::CodedInputS…

2026-10-04T00:09:36.740724+00:00

msrc_CVE-2025-53605

RUSTSEC-2024-0437 — Crash due to uncontrolled recursion in protobuf crate

2026-10-04T00:09:36.740742+00:00

Affected: crates.io: protobuf

Affected version of this crate did not properly parse unknown fields when parsing a user-supplied input.

This allows an attacker to cause a stack overflow when parsing the mssage on untrusted data.

UBUNTU-CVE-2025-53605

2026-10-04T00:09:36.740760+00:00

Affected: Ubuntu:22.04:LTS: rust-protobuf, Ubuntu:24.04:LTS: rust-protobuf, Ubuntu:25.10: rust-protobuf, Ubuntu:26.04:LTS: rust-protobuf

The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::coded_input_stream::CodedInputStream::skip_group parsing of unknown fields in untrusted input.