GO-2021-0053

    Dashboard / Vulnerabilities / GO-2021-0053

    GO-2021-0053

    Published: 14 Apr 2021Last Modified: 4 Feb 2026

    Summary: Panic due to improper input validation in github.com/gogo/protobuf

    Details: Due to improper bounds checking, maliciously crafted input to generated Unmarshal methods can cause an out-of-bounds panic. If parsing messages from untrusted parties, this may be used as a denial of service vector.

    References: https://github.com/gogo/protobuf/commit/b03c65ea87cdc3521ede29f62fe3ce239267c1bc

    Affected packages

    Package

    Name: github.com/gogo/protobuf

    Purl: pkg:golang/github.com/gogo/protobuf

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -1.3.2

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GO-2021-0053 | CVE-DB