| Bug | bullseye | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-0994 | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | A denial-of-service (DoS) vulnerability exists in google.protobuf.json ... |
| CVE-2025-4565 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | Any project that uses Protobuf Pure-Python backendto parse untrusted P ... |
| CVE-2024-7254 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | Any project that parses untrusted Protocol Buffers datacontaining an a ... |
| CVE-2022-3510 | vulnerable (no DSA, ignored) | fixed | fixed | fixed | fixed | A parsing issue similar to CVE-2022-3171, but with Message-Type Extens ... |
| CVE-2022-3509 | vulnerable (no DSA, ignored) | fixed | fixed | fixed | fixed | A parsing issue similar to CVE-2022-3171, but with textformat in proto ... |
| CVE-2022-3171 | vulnerable (no DSA, ignored) | fixed | fixed | fixed | fixed | A parsing issue with binary data in protobuf-java core and lite versio ... |