AZL-35558
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-35558.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-35558
- Upstream
- Published
- 2024-03-05T23:15:07Z
- Modified
- 2026-04-01T05:13:00.176496Z
- Summary
- CVE-2024-24786 affecting package cf-cli for versions less than 8.4.0-22
- Details
-
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.
- References