OSSIndex / vulns

Report missing advisories and corrections on OSS Index
17 stars 12 forks source link

Advisory: CVE-2021-22569 Core Protocols Buffers #269

Closed mcr-paulanand closed 1 year ago

mcr-paulanand commented 2 years ago

To facilitate future automation, please use the following format

Advisory details

  URL: https://nvd.nist.gov/vuln/detail/CVE-2021-22569
  format: maven
  namespace: com.google.protobuf
  name: protobuf-java
  versions: (,3.16.0], [3.18.0,3.18.1], [3.19.0,3.19.1]

More information Any additional information that might be useful/interesting

ken-duck commented 1 year ago

This past year among other changes we upgraded the OSS Index vulnerability database. The new database has significantly more vulnerabilities, is much more actively maintained, and has more in depth research on many of the issues. The issue reported here is reported in the new database and as such we are closing the issue.

For the record, we are migrating to a new email-based reporting system in order to better mesh with our internal processes, which will allow us to be more reactive to our users.