Currently, the shared object file uses google.golang.org/protobuf v1.30.0, which reportedly has a vulnerability.
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.
Upgrading the version to v1.33.0 should fix the issue. Can we please have this sooner rather than later?