cayley icon indicating copy to clipboard operation
cayley copied to clipboard

Security issue with github.com/gogo/protobuf version < 1.3.2

Open gennadylaventman opened this issue 2 years ago • 1 comments

github.com/gogo/protobuf versions lower that 1.3.2 there is security weakness.

An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarshal/unmarshal.go lacks certain index validation, aka the "skippy peanut butter" issue.

gennadylaventman avatar Mar 30 '22 15:03 gennadylaventman

Same problem relevant to github.com/cayleygraph/quad as well.

gennadylaventman avatar Mar 30 '22 15:03 gennadylaventman

Should be fixed now. Updated to 1.3.2.

dennwc avatar Jul 24 '23 08:07 dennwc