Update protobuf due to CVE-2026-0994 #15498
Description
Determine this is the right repository
- I determined this is the correct repository in which to report this bug.
Summary of the issue
A new vulernability is found in the protobuf package :
https://nvd.nist.gov/vuln/detail/CVE-2026-0994
its fixed in version 6.33.5 .
Can we make this the minimum version of protobuf in googleapis-common-protos? (This will then also remove all the exclude 4.x versions in that line.)