{
  "cveId": "CVE-2026-0994",
  "url": "https://patchblox.com/security/cve/CVE-2026-0994",
  "summary": "CVE-2026-0994 is fixed in 33 products on 1 platform, first by elpa-protobuf-mode 3.12.4-1ubuntu7.22.04.6, released January 23, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "protobuf: A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_re...",
  "description": "A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.\nDue to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python\u2019s recursion stack and causing a RecursionError.",
  "published": "2026-01-23T07:16:00Z",
  "severity": "important",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00712,
  "epssPercentile": 0.53829,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "elpa-protobuf-mode",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "3.12.4-1ubuntu7.22.04.6",
      "fix": "elpa-protobuf-mode 3.12.4-1ubuntu7.22.04.6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-elpa-protobuf-mode-3.12.4-1ubuntu7.22.04.6",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "elpa-protobuf-mode",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "3.21.12-8.2ubuntu0.3",
      "fix": "elpa-protobuf-mode 3.21.12-8.2ubuntu0.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-elpa-protobuf-mode-3.21.12-8.2ubuntu0.3",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "elpa-protobuf-mode",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "3.21.12-11ubuntu3.1",
      "fix": "elpa-protobuf-mode 3.21.12-11ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-elpa-protobuf-mode-3.21.12-11ubuntu3.1",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "elpa-protobuf-mode",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "3.21.12-15ubuntu1",
      "fix": "elpa-protobuf-mode 3.21.12-15ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-elpa-protobuf-mode-3.21.12-15ubuntu1",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotobuf-java",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "3.0.0-9.1ubuntu1.1\u002Besm4",
      "fix": "libprotobuf-java 3.0.0-9.1ubuntu1.1\u002Besm4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libprotobuf-java-3.0.0-9.1ubuntu1.1-esm4",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotobuf-java",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3.6.1.3-2ubuntu5.2\u002Besm3",
      "fix": "libprotobuf-java 3.6.1.3-2ubuntu5.2\u002Besm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libprotobuf-java-3.6.1.3-2ubuntu5.2-esm3",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotobuf-java",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "3.12.4-1ubuntu7.22.04.6",
      "fix": "libprotobuf-java 3.12.4-1ubuntu7.22.04.6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libprotobuf-java-3.12.4-1ubuntu7.22.04.6",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotobuf-java",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "3.21.12-8.2ubuntu0.3",
      "fix": "libprotobuf-java 3.21.12-8.2ubuntu0.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libprotobuf-java-3.21.12-8.2ubuntu0.3",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotobuf-java",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "3.21.12-11ubuntu3.1",
      "fix": "libprotobuf-java 3.21.12-11ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-libprotobuf-java-3.21.12-11ubuntu3.1",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotobuf-java",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "3.21.12-15ubuntu1",
      "fix": "libprotobuf-java 3.21.12-15ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-libprotobuf-java-3.21.12-15ubuntu1",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotobuf-lite10",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "3.0.0-9.1ubuntu1.1\u002Besm4",
      "fix": "libprotobuf-lite10 3.0.0-9.1ubuntu1.1\u002Besm4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libprotobuf-lite10-3.0.0-9.1ubuntu1.1-esm4",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotobuf-lite17",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3.6.1.3-2ubuntu5.2\u002Besm3",
      "fix": "libprotobuf-lite17 3.6.1.3-2ubuntu5.2\u002Besm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libprotobuf-lite17-3.6.1.3-2ubuntu5.2-esm3",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotobuf-lite23",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "3.12.4-1ubuntu7.22.04.6",
      "fix": "libprotobuf-lite23 3.12.4-1ubuntu7.22.04.6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libprotobuf-lite23-3.12.4-1ubuntu7.22.04.6",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotobuf-lite32t64",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "3.21.12-8.2ubuntu0.3",
      "fix": "libprotobuf-lite32t64 3.21.12-8.2ubuntu0.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libprotobuf-lite32t64-3.21.12-8.2ubuntu0.3",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotobuf-lite32t64",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "3.21.12-11ubuntu3.1",
      "fix": "libprotobuf-lite32t64 3.21.12-11ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-libprotobuf-lite32t64-3.21.12-11ubuntu3.1",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotobuf-lite32t64",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "3.21.12-15ubuntu1",
      "fix": "libprotobuf-lite32t64 3.21.12-15ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-libprotobuf-lite32t64-3.21.12-15ubuntu1",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotobuf10",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "3.0.0-9.1ubuntu1.1\u002Besm4",
      "fix": "libprotobuf10 3.0.0-9.1ubuntu1.1\u002Besm4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libprotobuf10-3.0.0-9.1ubuntu1.1-esm4",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotobuf17",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3.6.1.3-2ubuntu5.2\u002Besm3",
      "fix": "libprotobuf17 3.6.1.3-2ubuntu5.2\u002Besm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libprotobuf17-3.6.1.3-2ubuntu5.2-esm3",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotobuf23",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "3.12.4-1ubuntu7.22.04.6",
      "fix": "libprotobuf23 3.12.4-1ubuntu7.22.04.6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libprotobuf23-3.12.4-1ubuntu7.22.04.6",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotobuf32t64",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "3.21.12-8.2ubuntu0.3",
      "fix": "libprotobuf32t64 3.21.12-8.2ubuntu0.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libprotobuf32t64-3.21.12-8.2ubuntu0.3",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotobuf32t64",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "3.21.12-11ubuntu3.1",
      "fix": "libprotobuf32t64 3.21.12-11ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-libprotobuf32t64-3.21.12-11ubuntu3.1",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotobuf32t64",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "3.21.12-15ubuntu1",
      "fix": "libprotobuf32t64 3.21.12-15ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-libprotobuf32t64-3.21.12-15ubuntu1",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotoc10",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "3.0.0-9.1ubuntu1.1\u002Besm4",
      "fix": "libprotoc10 3.0.0-9.1ubuntu1.1\u002Besm4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libprotoc10-3.0.0-9.1ubuntu1.1-esm4",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotoc17",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3.6.1.3-2ubuntu5.2\u002Besm3",
      "fix": "libprotoc17 3.6.1.3-2ubuntu5.2\u002Besm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libprotoc17-3.6.1.3-2ubuntu5.2-esm3",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotoc23",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "3.12.4-1ubuntu7.22.04.6",
      "fix": "libprotoc23 3.12.4-1ubuntu7.22.04.6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libprotoc23-3.12.4-1ubuntu7.22.04.6",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotoc32t64",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "3.21.12-8.2ubuntu0.3",
      "fix": "libprotoc32t64 3.21.12-8.2ubuntu0.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libprotoc32t64-3.21.12-8.2ubuntu0.3",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotoc32t64",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "3.21.12-11ubuntu3.1",
      "fix": "libprotoc32t64 3.21.12-11ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-libprotoc32t64-3.21.12-11ubuntu3.1",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "libprotoc32t64",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "3.21.12-15ubuntu1",
      "fix": "libprotoc32t64 3.21.12-15ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-libprotoc32t64-3.21.12-15ubuntu1",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "php-google-protobuf",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "3.21.12-8.2ubuntu0.3",
      "fix": "php-google-protobuf 3.21.12-8.2ubuntu0.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-php-google-protobuf-3.21.12-8.2ubuntu0.3",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "php-google-protobuf",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "3.21.12-11ubuntu3.1",
      "fix": "php-google-protobuf 3.21.12-11ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-php-google-protobuf-3.21.12-11ubuntu3.1",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "php-google-protobuf",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "3.21.12-15ubuntu1",
      "fix": "php-google-protobuf 3.21.12-15ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-php-google-protobuf-3.21.12-15ubuntu1",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "3.21.12-3\u002Bdeb12u1",
      "fix": "DEBIAN-CVE-2026-0994",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-0994",
      "released": "2026-01-23T15:16:06Z"
    },
    {
      "platform": "linux",
      "product": "protobuf",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "3.21.12-11\u002Bdeb13u1",
      "fix": "DEBIAN-CVE-2026-0994",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-0994",
      "released": "2026-01-23T15:16:06Z"
    },
    {
      "platform": "linux",
      "product": "protobuf",
      "release": "Debian 14",
      "fixedVersion": "3.21.12-16",
      "fix": "DEBIAN-CVE-2026-0994",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-0994",
      "released": "2026-01-23T15:16:06Z"
    },
    {
      "platform": "linux",
      "product": "protobuf",
      "release": "RHEL 10",
      "fixedVersion": "3.19.6-11.el10_0.1",
      "fix": "RHSA-2026:3218",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-3218",
      "released": "2026-01-23T14:55:16Z"
    },
    {
      "platform": "linux",
      "product": "protobuf",
      "release": "RHEL 9",
      "fixedVersion": "0:3.14.0-17.el9_7",
      "fix": "RHSA-2026:3095",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-3095",
      "released": "2026-03-12T22:28:44Z"
    },
    {
      "platform": "linux",
      "product": "protobuf",
      "release": "almalinux 10",
      "fixedVersion": "3.19.6-15.el10_1",
      "fix": "ALSA-2026:3094",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-3094",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf",
      "release": "almalinux 9",
      "fixedVersion": "3.14.0-17.el9_7",
      "fix": "ALSA-2026:3095",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-3095",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf",
      "release": "amzn 2023",
      "fixedVersion": "3.19.6-1.amzn2023.0.3",
      "fix": "ALAS2023-2026-1407",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1407",
      "released": "2026-02-16T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf",
      "release": "ol 10",
      "fixedVersion": "0:3.19.6-15.el10_1",
      "fix": "ELSA-2026-3094",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-3094",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf",
      "release": "ol 9",
      "fixedVersion": "0:3.14.0-17.el9_7",
      "fix": "ELSA-2026-3095",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-3095",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "25.1-150600.16.16.1",
      "fix": "SUSE-SU-2026:0374-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0374-1",
      "released": "2026-02-04T07:03:36Z"
    },
    {
      "platform": "linux",
      "product": "protobuf",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "28.3-160000.3.1",
      "fix": "OPENSUSE-SU-2026:20390-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20390-1",
      "released": "2026-03-18T18:15:53Z"
    },
    {
      "platform": "linux",
      "product": "protobuf",
      "release": "rocky 10",
      "fixedVersion": "0:3.19.6-15.el10_1",
      "fix": "RLSA-2026:3094",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-3094",
      "released": "2026-02-24T18:56:34Z"
    },
    {
      "platform": "linux",
      "product": "protobuf",
      "release": "rocky 9",
      "fixedVersion": "0:3.14.0-17.el9_7",
      "fix": "RLSA-2026:3095",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-3095",
      "released": "2026-02-24T18:54:11Z"
    },
    {
      "platform": "linux",
      "product": "protobuf",
      "release": "sles 15.6",
      "fixedVersion": "3.9.2-150200.4.30.1",
      "fix": "SUSE-SU-2026:0618-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0618-1",
      "released": "2026-02-24T15:35:39Z"
    },
    {
      "platform": "linux",
      "product": "protobuf",
      "release": "sles 15.7",
      "fixedVersion": "3.9.2-150200.4.30.1",
      "fix": "SUSE-SU-2026:0618-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0618-1",
      "released": "2026-02-24T15:35:39Z"
    },
    {
      "platform": "linux",
      "product": "protobuf",
      "release": "sles 16.0",
      "fixedVersion": "28.3-160000.3.1",
      "fix": "SUSE-SU-2026:20907-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20907-1",
      "released": "2026-03-18T18:11:52Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-compiler",
      "release": "RHEL 9",
      "fixedVersion": "0:3.14.0-17.el9_7",
      "fix": "RHSA-2026:3095",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-3095",
      "released": "2026-03-12T22:28:44Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-compiler",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "3.0.0-9.1ubuntu1.1\u002Besm4",
      "fix": "protobuf-compiler 3.0.0-9.1ubuntu1.1\u002Besm4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-protobuf-compiler-3.0.0-9.1ubuntu1.1-esm4",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-compiler",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3.6.1.3-2ubuntu5.2\u002Besm3",
      "fix": "protobuf-compiler 3.6.1.3-2ubuntu5.2\u002Besm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-protobuf-compiler-3.6.1.3-2ubuntu5.2-esm3",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-compiler",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "3.12.4-1ubuntu7.22.04.6",
      "fix": "protobuf-compiler 3.12.4-1ubuntu7.22.04.6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-protobuf-compiler-3.12.4-1ubuntu7.22.04.6",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-compiler",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "3.21.12-8.2ubuntu0.3",
      "fix": "protobuf-compiler 3.21.12-8.2ubuntu0.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-protobuf-compiler-3.21.12-8.2ubuntu0.3",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-compiler",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "3.21.12-11ubuntu3.1",
      "fix": "protobuf-compiler 3.21.12-11ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-protobuf-compiler-3.21.12-11ubuntu3.1",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-compiler",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "3.21.12-15ubuntu1",
      "fix": "protobuf-compiler 3.21.12-15ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-protobuf-compiler-3.21.12-15ubuntu1",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-compiler",
      "release": "almalinux 10",
      "fixedVersion": "3.19.6-15.el10_1",
      "fix": "ALSA-2026:3094",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-3094",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-compiler",
      "release": "almalinux 9",
      "fixedVersion": "3.14.0-17.el9_7",
      "fix": "ALSA-2026:3095",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-3095",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-compiler",
      "release": "amzn 2023",
      "fixedVersion": "3.19.6-1.amzn2023.0.3",
      "fix": "ALAS2023-2026-1407",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1407",
      "released": "2026-02-16T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-compiler",
      "release": "ol 10",
      "fixedVersion": "0:3.19.6-15.el10_1",
      "fix": "ELSA-2026-3094",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-3094",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-compiler",
      "release": "ol 9",
      "fixedVersion": "0:3.14.0-17.el9_7",
      "fix": "ELSA-2026-3095",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-3095",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-compiler-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "3.19.6-1.amzn2023.0.3",
      "fix": "ALAS2023-2026-1407",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1407",
      "released": "2026-02-16T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "3.19.6-1.amzn2023.0.3",
      "fix": "ALAS2023-2026-1407",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1407",
      "released": "2026-02-16T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "3.19.6-1.amzn2023.0.3",
      "fix": "ALAS2023-2026-1407",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1407",
      "released": "2026-02-16T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:3.14.0-17.el9_7",
      "fix": "RHSA-2026:3095",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-3095",
      "released": "2026-03-12T22:28:44Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-devel",
      "release": "almalinux 10",
      "fixedVersion": "3.19.6-15.el10_1",
      "fix": "ALSA-2026:3094",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-3094",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-devel",
      "release": "almalinux 9",
      "fixedVersion": "3.14.0-17.el9_7",
      "fix": "ALSA-2026:3095",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-3095",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-devel",
      "release": "amzn 2023",
      "fixedVersion": "3.19.6-1.amzn2023.0.3",
      "fix": "ALAS2023-2026-1407",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1407",
      "released": "2026-02-16T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-devel",
      "release": "ol 10",
      "fixedVersion": "0:3.19.6-15.el10_1",
      "fix": "ELSA-2026-3094",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-3094",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-devel",
      "release": "ol 9",
      "fixedVersion": "0:3.14.0-17.el9_7",
      "fix": "ELSA-2026-3095",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-3095",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-emacs",
      "release": "amzn 2023",
      "fixedVersion": "3.19.6-1.amzn2023.0.3",
      "fix": "ALAS2023-2026-1407",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1407",
      "released": "2026-02-16T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-java",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "28.3-160000.3.1",
      "fix": "OPENSUSE-SU-2026:20390-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20390-1",
      "released": "2026-03-18T18:15:53Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-java",
      "release": "sles 16.0",
      "fixedVersion": "28.3-160000.3.1",
      "fix": "SUSE-SU-2026:20907-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20907-1",
      "released": "2026-03-18T18:11:52Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-lite",
      "release": "RHEL 9",
      "fixedVersion": "0:3.14.0-17.el9_7",
      "fix": "RHSA-2026:3095",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-3095",
      "released": "2026-03-12T22:28:44Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-lite",
      "release": "almalinux 10",
      "fixedVersion": "3.19.6-15.el10_1",
      "fix": "ALSA-2026:3094",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-3094",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-lite",
      "release": "almalinux 9",
      "fixedVersion": "3.14.0-17.el9_7",
      "fix": "ALSA-2026:3095",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-3095",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-lite",
      "release": "amzn 2023",
      "fixedVersion": "3.19.6-1.amzn2023.0.3",
      "fix": "ALAS2023-2026-1407",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1407",
      "released": "2026-02-16T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-lite",
      "release": "ol 10",
      "fixedVersion": "0:3.19.6-15.el10_1",
      "fix": "ELSA-2026-3094",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-3094",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-lite",
      "release": "ol 9",
      "fixedVersion": "0:3.14.0-17.el9_7",
      "fix": "ELSA-2026-3095",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-3095",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-lite-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "3.19.6-1.amzn2023.0.3",
      "fix": "ALAS2023-2026-1407",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1407",
      "released": "2026-02-16T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-lite-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:3.14.0-17.el9_7",
      "fix": "RHSA-2026:3095",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-3095",
      "released": "2026-03-12T22:28:44Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-lite-devel",
      "release": "almalinux 10",
      "fixedVersion": "3.19.6-15.el10_1",
      "fix": "ALSA-2026:3094",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-3094",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-lite-devel",
      "release": "almalinux 9",
      "fixedVersion": "3.14.0-17.el9_7",
      "fix": "ALSA-2026:3095",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-3095",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-lite-devel",
      "release": "amzn 2023",
      "fixedVersion": "3.19.6-1.amzn2023.0.3",
      "fix": "ALAS2023-2026-1407",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1407",
      "released": "2026-02-16T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-lite-devel",
      "release": "ol 10",
      "fixedVersion": "0:3.19.6-15.el10_1",
      "fix": "ELSA-2026-3094",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-3094",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-lite-devel",
      "release": "ol 9",
      "fixedVersion": "0:3.14.0-17.el9_7",
      "fix": "ELSA-2026-3095",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-3095",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-lite-static",
      "release": "amzn 2023",
      "fixedVersion": "3.19.6-1.amzn2023.0.3",
      "fix": "ALAS2023-2026-1407",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1407",
      "released": "2026-02-16T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-static",
      "release": "amzn 2023",
      "fixedVersion": "3.19.6-1.amzn2023.0.3",
      "fix": "ALAS2023-2026-1407",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1407",
      "released": "2026-02-16T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "protobuf-vim",
      "release": "amzn 2023",
      "fixedVersion": "3.19.6-1.amzn2023.0.3",
      "fix": "ALAS2023-2026-1407",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1407",
      "released": "2026-02-16T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python-protobuf",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "3.0.0-9.1ubuntu1.1\u002Besm4",
      "fix": "python-protobuf 3.0.0-9.1ubuntu1.1\u002Besm4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python-protobuf-3.0.0-9.1ubuntu1.1-esm4",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "python-protobuf",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3.6.1.3-2ubuntu5.2\u002Besm3",
      "fix": "python-protobuf 3.6.1.3-2ubuntu5.2\u002Besm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-python-protobuf-3.6.1.3-2ubuntu5.2-esm3",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "python-protobuf",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "5.28.3-160000.3.1",
      "fix": "OPENSUSE-SU-2026:20390-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20390-1",
      "released": "2026-03-18T18:15:53Z"
    },
    {
      "platform": "linux",
      "product": "python-protobuf",
      "release": "sles 16.0",
      "fixedVersion": "5.28.3-160000.3.1",
      "fix": "SUSE-SU-2026:20907-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20907-1",
      "released": "2026-03-18T18:11:52Z"
    },
    {
      "platform": "linux",
      "product": "python3-protobuf",
      "release": "RHEL 9",
      "fixedVersion": "0:3.14.0-17.el9_7",
      "fix": "RHSA-2026:3095",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-3095",
      "released": "2026-03-12T22:28:44Z"
    },
    {
      "platform": "linux",
      "product": "python3-protobuf",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "3.0.0-9.1ubuntu1.1\u002Besm4",
      "fix": "python3-protobuf 3.0.0-9.1ubuntu1.1\u002Besm4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python3-protobuf-3.0.0-9.1ubuntu1.1-esm4",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-protobuf",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3.6.1.3-2ubuntu5.2\u002Besm3",
      "fix": "python3-protobuf 3.6.1.3-2ubuntu5.2\u002Besm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-python3-protobuf-3.6.1.3-2ubuntu5.2-esm3",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-protobuf",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "3.12.4-1ubuntu7.22.04.6",
      "fix": "python3-protobuf 3.12.4-1ubuntu7.22.04.6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-python3-protobuf-3.12.4-1ubuntu7.22.04.6",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-protobuf",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "3.21.12-8.2ubuntu0.3",
      "fix": "python3-protobuf 3.21.12-8.2ubuntu0.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-python3-protobuf-3.21.12-8.2ubuntu0.3",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-protobuf",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "3.21.12-11ubuntu3.1",
      "fix": "python3-protobuf 3.21.12-11ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-python3-protobuf-3.21.12-11ubuntu3.1",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-protobuf",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "3.21.12-15ubuntu1",
      "fix": "python3-protobuf 3.21.12-15ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-python3-protobuf-3.21.12-15ubuntu1",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-protobuf",
      "release": "almalinux 10",
      "fixedVersion": "3.19.6-15.el10_1",
      "fix": "ALSA-2026:3094",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-3094",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-protobuf",
      "release": "almalinux 9",
      "fixedVersion": "3.14.0-17.el9_7",
      "fix": "ALSA-2026:3095",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-3095",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-protobuf",
      "release": "amzn 2023",
      "fixedVersion": "3.19.6-1.amzn2023.0.3",
      "fix": "ALAS2023-2026-1407",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1407",
      "released": "2026-02-16T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-protobuf",
      "release": "ol 10",
      "fixedVersion": "0:3.19.6-15.el10_1",
      "fix": "ELSA-2026-3094",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-3094",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-protobuf",
      "release": "ol 9",
      "fixedVersion": "0:3.14.0-17.el9_7",
      "fix": "ELSA-2026-3095",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-3095",
      "released": "2026-02-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-protobuf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "3.19.6-1.amzn2023.0.3",
      "fix": "ALAS2023-2026-1407",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1407",
      "released": "2026-02-16T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "ruby-google-protobuf",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3.6.1.3-2ubuntu5.2\u002Besm3",
      "fix": "ruby-google-protobuf 3.6.1.3-2ubuntu5.2\u002Besm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-ruby-google-protobuf-3.6.1.3-2ubuntu5.2-esm3",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "ruby-google-protobuf",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "3.12.4-1ubuntu7.22.04.6",
      "fix": "ruby-google-protobuf 3.12.4-1ubuntu7.22.04.6",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ruby-google-protobuf-3.12.4-1ubuntu7.22.04.6",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "ruby-google-protobuf",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "3.21.12-8.2ubuntu0.3",
      "fix": "ruby-google-protobuf 3.21.12-8.2ubuntu0.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-ruby-google-protobuf-3.21.12-8.2ubuntu0.3",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "ruby-google-protobuf",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "3.21.12-11ubuntu3.1",
      "fix": "ruby-google-protobuf 3.21.12-11ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-ruby-google-protobuf-3.21.12-11ubuntu3.1",
      "released": "2026-01-23T07:16:00Z"
    },
    {
      "platform": "linux",
      "product": "ruby-google-protobuf",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "3.21.12-15ubuntu1",
      "fix": "ruby-google-protobuf 3.21.12-15ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-ruby-google-protobuf-3.21.12-15ubuntu1",
      "released": "2026-01-23T07:16:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}