Vulnerability CVE-2024-24786


Published: 2024-03-05   Modified: 2024-03-06

Description:
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.

 References:
https://go.dev/cl/569356
https://pkg.go.dev/vuln/GO-2024-2611

Copyright 2026, cxsecurity.com

 

Back to Top