Vardhan0257/upb-any-recursion-audit

PoC

Ruby/PHP upb Any-recursion audit: falsified vs CVE-2026-0994 bug class

view exploit source poc_in_githubauthor Vardhan0257published 2026-09-16catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2026-0994UShigh7.5Exploit
A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan