TI-2026-39314 CVE-2026-54451 · GHSA-rv48-qqj5-crxg
Elixir protobuf: Unbounded recursion depth in embedded-message decoding
Priority HIGH 75
Elixir protobuf is a pure Elixir implementation of Google Protobuf.
elixir-protobuf
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
elixir-protobuf records in CISA KEVNo elixir-protobuf vulnerabilities are listed in CISA KEV.
Records
2 records
Priority HIGH 69
Uncontrolled Recursion vulnerability in Protobuf.JSON.Decode in elixir-protobuf protobuf allows an unauthenticated remote attacker to crash the decoding process via a deeply nested JSON document.