https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-21T23:32:34.306403+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-6409 CVE-2026-6409 — Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input 2026-10-21T23:32:34.308829+00:00

Affected: Protocol Buffers Protobuf-php (Pecl)

A Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input. Maliciously structured messages—specifically those containing negative varints or deep recursion—can be used to crash the application, impacting service availability.

 https://db.gcve.eu/vuln/usn-8943-1 USN-8943-1 — protobuf vulnerability 2026-10-21T23:32:34.308892+00:00

Affected: Ubuntu:24.04:LTS: protobuf, Ubuntu:26.04:LTS: protobuf

It was discovered that Protocol Buffers did not properly handle negative varint lengths or enforce recursion limits when parsing input in the PHP library. An attacker could possibly use this issue to cause applications using Protocol Buffers to crash or consume resources, resulting in a denial of service.