Advisory Database
  • Advisories
  • Dependency Scanning
  1. gem
  2. ›
  3. google-protobuf
  4. ›
  5. GMS-2022-5022

GMS-2022-5022: Duplicate of ./gem/google-protobuf/CVE-2022-3171.yml

October 4, 2022

Improper Neutralization in google-protobuf.

References

  • bugs.chromium.org/p/oss-fuzz/issues/detail?id=48771
  • github.com/advisories/GHSA-h4h5-3hr4-j3g2
  • github.com/protocolbuffers/protobuf/releases/tag/v21.7
  • github.com/protocolbuffers/protobuf/releases/tag/v3.16.3
  • github.com/protocolbuffers/protobuf/releases/tag/v3.19.6
  • github.com/protocolbuffers/protobuf/releases/tag/v3.20.3
  • github.com/protocolbuffers/protobuf/security/advisories/GHSA-h4h5-3hr4-j3g2

Code Behaviors & Features

Detect and mitigate GMS-2022-5022 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

All versions before 3.16.3, all versions starting from 3.17.0.rc.1 before 3.19.6, all versions starting from 3.20.0.rc.1 before 3.20.3, all versions starting from 3.21.0.rc.1 before 3.21.7

Fixed versions

  • 3.20.3
  • 3.21.7
  • 3.16.3
  • 3.19.6

Solution

Upgrade to versions 3.20.3, 3.21.7, 3.16.3, 3.19.6 or above.

Weakness

  • CWE-707: Improper Neutralization

Source file

gem/google-protobuf/GMS-2022-5022.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Wed, 14 May 2025 12:14:42 +0000.