Approved changes feed: RSS · Atom

cpe:2.3:a:golang:protobuf:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGolang (670356c5-bd1b-5c66-9eee-f755f5cec4c7)
ProductProtobuf (4ad6ef1d-cf33-58b9-b025-696fb87309ab)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/golang-gogoprotobuf purl2cpe 2026-06-01 10:12:04.476133
pkg:deb/debian/golang-goprotobuf purl2cpe 2026-06-01 10:12:04.476136
pkg:deb/ubuntu/golang-gogoprotobuf purl2cpe 2026-06-01 10:12:04.476139
pkg:deb/ubuntu/golang-goprotobuf purl2cpe 2026-06-01 10:12:04.476142
pkg:github/gogo/protobuf purl2cpe 2026-06-01 10:12:04.476144
pkg:github/golang/protobuf purl2cpe 2026-06-01 10:12:04.476147
pkg:rpm/fedora/golang-github-protobuf purl2cpe 2026-06-01 10:12:04.476150

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-3121 vulnerable 2026-06-03 14:45:10.084657 Details available
An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarshal/unmarshal.go lacks certain index validation, aka the "skippy peanut butter" issue.
Published: 2021-01-11T05:57:18.000Z
Updated: 2024-08-03T16:45:51.251Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.