Tag

protobuf-java

Safeguard articles tagged "protobuf-java" — guides, analysis, and best practices for software supply chain and application security.

1 article

Security

CVE-2022-3509: The protobuf-java DoS Vulnerability Explained

CVE-2022-3509 is a denial-of-service flaw in protobuf-java's text-format parser that lets crafted input trigger long garbage-collection pauses. Here is who is affected and how to fix it.

Jun 9, 20255 min read