Protocol Buffers CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Protocol Buffers CVE published 2026-04-16

CVE-2026-6409

A Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input. Maliciously structured messages—specifically those containing negative varints or deep recursion—can be used to crash the application, impacting service availability. This vulnerability affects Protobuf PHP library installations and defenders should assess exposure to prioritize verification a [truncated]