~ / search / GHSA-c3h9-896r-86jm

GHSA-c3h9-896r-86jm

Improper Input Validation in GoGo Protobuf

Source: GitHub Advisory Database (reviewed) High CVE-2021-3121

Packages

EcosystemPackageAffectedFixed in
Go github.com/gogo/protobuf < 1.3.2 1.3.2

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarshal/unmarshal.go lacks certain index validation, aka the "skippy peanut butter" issue.

References

External links from the advisory. They lead to third-party sites.