espresso-sequencer
espresso-sequencer copied to clipboard
RUSTSEC-2024-0437: Crash due to uncontrolled recursion in protobuf crate
Crash due to uncontrolled recursion in protobuf crate
| Details | |
|---|---|
| Package | protobuf |
| Version | 2.28.0 |
| URL | https://github.com/stepancheg/rust-protobuf/issues/749 |
| Date | 2024-12-12 |
Affected version of this crate did not properly parse unknown fields when parsing a user-supplied input.
This allows an attacker to cause a stack overflow when parsing the mssage on untrusted data.
See advisory page for additional details.