| tags: | |
| - security | |
| - proof-of-concept | |
| - protobuf | |
| license: mit | |
| # Protocol Buffers Publishing codeowner_github_teams materialization DoS PoC | |
| This repository contains a benign security research PoC for a `.pb` artifact | |
| that drives repeated-string materialization during | |
| `client_pb2.Publishing.ParseFromString(...)`. | |
| Files: | |
| - `control_one_documentation_uri.pb` | |
| - `malicious_codeowner_github_teams_5000000.pb` | |
| - `reproduce.py` | |