protobuf.js: Denial of service from crafted field names in generated code
Modified: 5/14/2026
package
pkg:npm/protobufjs
protobuf.js: Denial of service from crafted field names in generated code
Modified: 5/14/2026
protobuf.js: Code injection through bytes field defaults in generated toObject code
Modified: 5/13/2026
protobuf.js: Denial of service through unbounded protobuf recursion
Modified: 5/14/2026
protobuf.js: Code generation gadget after prototype pollution
Modified: 5/14/2026
Denial of Service in protobufjs
Modified: 11/8/2023
protobufjs: Memory amplification from preserved unknown fields in binary decode
Modified: 6/15/2026
protobufjs : Schema-derived names can shadow runtime-significant properties
Modified: 6/15/2026
protobuf.js: Prototype injection in generated message constructors
Modified: 5/14/2026
Prototype Pollution in protobufjs
Modified: 1/14/2025
protobufjs Prototype Pollution vulnerability
Modified: 2/4/2026
protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion
Modified: 5/20/2026
protobuf.js: Process-wide denial of service through unsafe option paths
Modified: 5/14/2026
protobufjs has overlong UTF-8 decoding
Modified: 5/14/2026
protobufjs: Denial of service through unbounded Any expansion during JSON conversion
Modified: 6/15/2026
Arbitrary code execution in protobufjs
Modified: 5/5/2026