PyPI / protobuf / 7.37.0rc1

protobuf 7.37.0rc1

Artifact scanned

protobuf-7.37.0rc1-py3-none-any.whl (wheel · 177.2 KB · SHA-256 bd29a590f690…)

Compared with

protobuf-7.36.2-py3-none-any.whl (0 signals introduced since)

Files

59 scanned, 4 skipped (binary, oversized, or unrecognised)

Signals

0 critical · 0 warn · 2 info

Scan time

3.8 s

LLM review

Reviewed by claude-haiku-5-5 (Anthropic): 2 of 2 warn and critical signals; 2 demoted to info.

Disclude version

4.3.0

Scanned (UTC)

2026-10-23 00:45

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

1. info warn → info by review encoding-octal google/protobuf/internal/python_edition_defaults.py:5:73

   7 consecutive `\NNN` octal escapes (entropy 2.5 bits/byte) (raw pass, confidence 0.65)

   HON_EDITION_DEFAULTS = b"\n\031\030\204\007\"\000*\022\010\001\020\002\030\002 \003(\0010\0028\002@\001H\001\n\031\030\347\007\"\000*\022\010\002\020\001\030\001 \002(\0010\0018\002@\001H\001\n\031\030\350\007\"\014\010\001\020\001\030\001 \002(\0010\001*\0068\002@\001H\001\n\031\030\351\007\"\020\010\001\020\001\030\0

   likely benign LLM, confidence 0.95 Generated protobuf edition-defaults file embedding a serialized descriptor as a bytes literal.

   Reasoning

   The snippet is a bytes literal of serialized protobuf descriptor data (field tags and small varints such as \001, \002, \020). This is the generated edition-defaults blob from the protobuf package, a normal way to embed a FileDescriptorProto. The raw pass flags octal escapes on byte-level patterns alone, which is a known high false-positive area. No execution, decoding of a payload, or network behavior is visible.

2. info warn → info by review encoding-octal google/protobuf/internal/python_edition_defaults.py:5:156

   7 consecutive `\NNN` octal escapes (entropy 2.5 bits/byte) (raw pass, confidence 0.65)

   (\0010\0028\002@\001H\001\n\031\030\347\007\"\000*\022\010\002\020\001\030\001 \002(\0010\0018\002@\001H\001\n\031\030\350\007\"\014\010\001\020\001\030\001 \002(\0010\001*\0068\002@\001H\001\n\031\030\351\007\"\020\010\001\020\001\030\001 \002(\0010\0018\001@\002*\002H\001\n\031\030\352\007\"\022\010\001\020\001\030\0

   likely benign LLM, confidence 0.95 Continuation of the generated protobuf serialized descriptor bytes in the same file.

   Reasoning

   Same file and same kind of content as the other finding: a continuation of the serialized protobuf descriptor bytes with repeated small field-tag octal escapes. The raw-pass octal-escape signal fires on the binary encoding of a generated data blob, not on anything malicious. No dynamic execution or dropper behavior is present.

Reproduce This Scan

Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.3.0
curl -fsSL -o protobuf-7.37.0rc1-py3-none-any.whl https://files.pythonhosted.org/packages/de/0a/c3f826ea06144fb9a3ba288c7b5267e8ea4cfcfcc85d8b4fddf1a9870247/protobuf-7.37.0rc1-py3-none-any.whl
printf '%s  %s\n' bd29a590f690e5e521aeeaa5f26d7aed05b69f61a35b2083bde58b4832025354 protobuf-7.37.0rc1-py3-none-any.whl | shasum -a 256 -c -
unzip -q protobuf-7.37.0rc1-py3-none-any.whl -d pkg
disclude scan --untrusted --severity info pkg