IntelLabs / IntelLabs/vdms

Protobuf Vulnerabilities

Open
#298 0 comments 1 reaction 0 assignees View on GitHub
Dependencies Priority: Urgent
Dominant language
C++
Stars
93
Forks
34
PR merge metrics
No merged PRs in 30d

Description

Vulnerabilities were reported via [Dependabot 10](https://github.com/IntelLabs/vdms/security/dependabot/10) and [Dependabot 11](https://github.com/IntelLabs/vdms/security/dependabot/11).

## Remediation and Mitigation
A mitigation is available now. Please update to the latest available versions of the following packages:
* protobuf-python(4.25.8, 5.29.5, 6.31.1)
* [protobuf vulnerabilities](https://security.snyk.io/package/pip/protobuf)

## Task
Upgrade protobuf C++ and Python to >=4.25.8

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.