Google protobuf is a data interchange format from the US company Google. google protobuf-java core and lite versions parse binary data for a denial of service vulnerability, which can be exploited by attackers to cause a denial of service.

CPENameOperatorVersion
google google protobuf rubylt3.16.3
>=3.17.0，lt3.19.6
>=3.20.0，lt3.20.3
>=3.21.0，lt3.21.7
google protobuf javalt3.16.3
google protobuf java >=3.17.0，lt3.19.6
>=3.20.0，lt3.20.3
>=3.21.0，lt3.21.7
>=3.17.0，lt3.19.6
>=3.20.0，lt3.20.3

Name	Operator	Version
google google protobuf ruby	lt	3.16.3
>=3.17.0，	lt	3.19.6
>=3.20.0，	lt	3.20.3
>=3.21.0，	lt	3.21.7
google protobuf java	lt	3.16.3
google protobuf java >=3.17.0，	lt	3.19.6
>=3.20.0，	lt	3.20.3
>=3.21.0，	lt	3.21.7
>=3.17.0，	lt	3.19.6
>=3.20.0，	lt	3.20.3