Status
Impact
This vulnerability requires upgrading protobuf from 2.28.0 to 3.7.2. However, qdrant's storage crate depends on raft 0.7.0, which explicitly requires protobuf 2.x. The raft crate is the latest version available and does not support protobuf 3.x. This fix is blocked until either the raft project releases a new version supporting protobuf 3.x, or qdrant replaces raft with an alternative consensus library.
Status