VDB
Sign up

PYSEC-2017-150

Withdrawn 2026-07-09. This finding no longer applies and is kept for reference. It is not used when checking packages.

Quick fix

PYSEC-2017-150 — protobuf: upgrade to the fixed version with the command below.

pip install --upgrade 'protobuf>=3.1.0.post1'

Details

Withdrawn as duplicate of PYSEC-2017-65 protobuf allows remote authenticated attackers to cause a heap-based buffer overflow.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/protobuf
Introduced in: 0Fixed in: 3.1.0.post1
Fixpip install --upgrade 'protobuf>=3.1.0.post1'

References