The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| google.golang.org/protobuf(Go) | 0 | 1.33.0 | N/A |
| google.golang.org/protobuf/encoding/protojson(Go) | 0 | 1.33.0 | N/A |
| google.golang.org/protobuf/internal/encoding/json(Go) | 0 | 1.33.0 | N/A |
CVSS Metrics
