https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T03:42:18.777517+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-0994 UBUNTU-CVE-2026-0994 2026-10-15T03:42:18.779724+00:00

Affected: Ubuntu:Pro:18.04:LTS: protobuf, Ubuntu:Pro:20.04:LTS: protobuf, Ubuntu:22.04:LTS: protobuf, Ubuntu:24.04:LTS: protobuf, Ubuntu:25.10: protobuf, Ubuntu:26.04:LTS: protobuf

A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.