Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/protobuf@3.21.9-3?distro=trixie
purl pkg:deb/debian/protobuf@3.21.9-3?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (6)
Vulnerability Summary Aliases
VCID-bm8g-3tja-rbgg A vulnerability has been discovered in protobuf-java which could result in denial of service. CVE-2022-3171
GHSA-h4h5-3hr4-j3g2
GMS-2022-4942
GMS-2022-4943
GMS-2022-4944
GMS-2022-4945
GMS-2022-5022
VCID-bzax-ps8n-s7ge Duplicate This advisory duplicates another. CVE-2021-22569
GHSA-wrvw-hg22-4m67
GMS-2022-1
GMS-2022-5
GMS-2022-6
VCID-f7bp-rkuk-9qfn A vulnerability has been discovered in protobuf-java which could result in denial of service. CVE-2022-3510
GHSA-4gg5-vx3j-xwc7
VCID-kkrb-cyzz-8qbn A vulnerability has been discovered in protobuf-java which could result in denial of service. CVE-2022-3509
GHSA-g5ww-5jh7-63cx
VCID-r3jf-wsh1-f3gb A vulnerability has been discovered in protobuf and protobuf-python, which can lead to a denial of service. CVE-2022-1941
GHSA-8gq9-2x98-w8hf
VCID-uc1w-7er3-x7gb Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to version 3.15.0 or greater. CVE-2021-22570
GHSA-77rm-9x9h-xj3g
PYSEC-2022-48

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:54:31.704474+00:00 Debian Importer Fixing VCID-uc1w-7er3-x7gb https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T12:00:35.561747+00:00 Debian Importer Fixing VCID-bzax-ps8n-s7ge https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:23:41.112471+00:00 Debian Importer Fixing VCID-r3jf-wsh1-f3gb https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:51:46.448858+00:00 Debian Importer Fixing VCID-uc1w-7er3-x7gb https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:12:07.205387+00:00 Debian Importer Fixing VCID-bzax-ps8n-s7ge https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:16:19.202802+00:00 Debian Importer Fixing VCID-r3jf-wsh1-f3gb https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:50:23.047754+00:00 Debian Importer Fixing VCID-f7bp-rkuk-9qfn https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:50:23.000736+00:00 Debian Importer Fixing VCID-kkrb-cyzz-8qbn https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:50:22.955098+00:00 Debian Importer Fixing VCID-bm8g-3tja-rbgg https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:50:22.907548+00:00 Debian Importer Fixing VCID-r3jf-wsh1-f3gb https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:50:22.867369+00:00 Debian Importer Fixing VCID-uc1w-7er3-x7gb https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:50:22.824140+00:00 Debian Importer Fixing VCID-bzax-ps8n-s7ge https://security-tracker.debian.org/tracker/data/json 38.1.0