The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::coded_input_stream::CodedInputStream::skip_group parsing of unknown fields in untrusted input.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| protobuf(crates.io) | 0 | 3.7.2 | N/A |
CVSS Metrics
