8000

All issues

`MapView::iter_unique` / `len_unique` are O(n²), which rules them out on any path that decodes untrusted input

#363

· advait-specter opened

on Aug 11, 2026

Reflective codegen: FILE_DESCRIPTOR_SET_BYTES emission costs one proc_macro2 token per byte, dominating codegen time/memory for a large proto tree

#362

· th0114nd opened

on Jul 31, 2026

Feature Request: expose decode options (`max_message_size`, recursion limit) on `DynamicMessage`

#359

· ElanHR opened

on Jul 28, 2026

[BUG]Incomplete fix for CVE-2026-55407: extension-merge loop bypasses buffa's unknown-field limit, enabling unbounded memory amplification and OOM

#357

· abdurrahmanshahzad opened

on Jul 26, 2026

Generated descriptor_pool() bound can be tighter than the default it replaced (v0.9.1)

#336

· iainmcgin opened

on Jul 24, 2026

JSON decoding ignores DecodeOptions, so element-memory and size limits bound only the protobuf codec

#330

· iainmcgin opened

on Jul 21, 2026

Deduplicate the embedded reflection descriptor pool across packages

#310

· hcrosse opened

on Jul 13, 2026

buffa-build: Config::exclude_package knob (demand-driven follow-up to #279)

#293

· iainmcgin opened

on Jul 8, 2026

codegen: warn when a kept file references an excluded package as a field type

#292

· iainmcgin opened

on Jul 8, 2026

buffa-remote-derive: generate feature-gated serde/Arbitrary/reflection forwarders

#290

· iainmcgin opened

on Jul 8, 2026

buffa-build: path-scoped preserve_unknown_fields_in for per-message unknown-field preservation

#281

· iainmcgin opened

on Jul 6, 2026

buffa in production: full prost->buffa migration (+21.65%) — memory & binary-size tradeoffs worth investigating

#270

· jlucaso1 opened

on Jul 2, 2026

0