HeroDevs
Visit NES for Protocol Buffers Home Page

Protocol Buffers 3.21.x Release Notes

2 versions

Comprehensive release notes and changelog for Protocol Buffers 3.21.x, including security patches, bug fixes, and feature updates across all supported versions.

Jul 9, 2026
Latest: 3.21.14
2 Patched Vulnerabilities
VEX Statements

July 2026

3.21.14

Released Jul 9, 2026
CVE-2024-7254
GHSA-735f-pc8j-v9w8
Full Version: 
3.21.12-protobuf-3.21.14

Bug Fixes

  • Fix uncontrolled recursion when parsing untrusted, deeply nested Protocol Buffers data containing unknown groups, which could exhaust the stack and trigger a StackOverflowError denial of service in protobuf-java (High severity). (CVE-2024-7254, GHSA-735f-pc8j-v9w8)

3.21.13

Released Jul 9, 2026
Full Version: 
3.21.12-protobuf-3.21.13

Notes

  • This release originates from the open‑source Protocol Buffers project forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds.
  • Initial NES release for the Java artifacts on the 3.21.x line, anchored on Protocol Buffers 3.21.12.

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.