https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-h4h5-3hr4-j3g2 Protobuf has made an upstream change to Poison Java gencode from vulnerable releases https://protobuf.dev/news/2025-01-23/