Skip to content

v1.33.0
Compare
Choose a tag to compare
@neild neild released this 06 Mar 00:48
v1.33.0
ec47fd1

This release contains one security fix:

  • encoding/protojson: Unmarshal could enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set. Unmarshal now correctly returns an error when handling these inputs. This is CVE-2024-24786.
Assets 10