CVE-2025-53605

Name of the Vulnerable Software and Affected Versions: protobuf crate for Rust versions prior to 3.7.2

Description: The issue allows uncontrolled recursion in the protobuf::coded input stream::CodedInputStream::skip group function when parsing unknown fields in untrusted input. This can occur due to the improper handling of unknown fields, leading to potential security risks.

Recommendations: For versions prior to 3.7.2, update to version 3.7.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of the protobuf::coded input stream::CodedInputStream::skip group function when parsing untrusted input until a patch is available.