Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
jhump/protoreflect
main @ b5bef4a
3
Fixes
0
CVEs
HIGH
Peak severity
Highlights
Denial of Service: 3 prior fixes. Scrutinize any change in this area.
desc/protoparse: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: A nil pointer dereference panic can be triggered when parsing and validating custom options containing map entries with no value. This allows remote attackers to crash the application processing the dynamic protobuf payload.
Denial of Service: Parsing invalid proto files containing empty enums triggers an out-of-bounds slice access in the enum validation logic, leading to an unhandled panic and Denial of Service.
Denial of Service: Attempting to parse non-proto files or files with early syntax errors causes a nil-pointer dereference panic when the parser tries to assign source ranges on uninitialized objects.