MEDIUM5.3npm
GHSA-2pr8-phx7-x9h3· CVE-2026-44294protobuf.js: Denial of service from crafted field names in generated code
Modified: 9/10/2026
package
npm/protobufjs
pkg:npm/protobufjs
HIGHnpm
GHSA-66ff-xgx4-vchm· CVE-2026-44293protobuf.js: Code injection through bytes field defaults in generated toObject code
Modified: 9/10/2026
HIGH7.5npm
GHSA-685m-2w69-288q· CVE-2026-44289protobuf.js: Denial of service through unbounded protobuf recursion
Modified: 9/10/2026
HIGH8.1npm
GHSA-75px-5xx7-5xc7· CVE-2026-44291protobuf.js: Code generation gadget after prototype pollution
Modified: 9/10/2026
MEDIUM5.5npm
GHSA-762f-c2wg-m8c8· CVE-2018-3738Denial of Service in protobufjs
Modified: 11/8/2023
MEDIUM5.3npm
GHSA-94rc-8x27-4472· CVE-2026-54270protobufjs: Memory amplification from preserved unknown fields in binary decode
Modified: 9/10/2026
MEDIUM5.3npm
GHSA-f38q-mgvj-vph7· CVE-2026-54269protobufjs : Schema-derived names can shadow runtime-significant properties
Modified: 9/10/2026
MEDIUM5.3npm
GHSA-fx83-v9x8-x52w· CVE-2026-44292protobuf.js: Prototype injection in generated message constructors
Modified: 9/10/2026
HIGH7.5npm
GHSA-g954-5hwp-pp24· CVE-2022-25878Prototype Pollution in protobufjs
Modified: 1/14/2025
CRITICAL9.8npm
GHSA-h755-8qp9-cq85· CVE-2023-36665protobufjs Prototype Pollution vulnerability
Modified: 8/7/2026
MEDIUM5.3npm
GHSA-j3f2-48v5-ccww· CVE-2026-59877protobufjs: Denial of Service via infinite loop in .proto option parsing
Modified: 9/10/2026
MEDIUM4.8npm
GHSA-jfj6-75fj-8934· CVE-2026-59876protobufjs: Text Format string map parsing can mutate returned map object prototype
Modified: 9/10/2026
MEDIUM5.3npm
GHSA-jggg-4jg4-v7c6· CVE-2026-45740protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion
Modified: 9/10/2026
HIGH7.5npm
GHSA-jvwf-75h9-cwgg· CVE-2026-44290protobuf.js: Process-wide denial of service through unsafe option paths
Modified: 9/10/2026
MEDIUM5.3npm
GHSA-q6x5-8v7m-xcrf· CVE-2026-44288protobufjs has overlong UTF-8 decoding
Modified: 9/10/2026
HIGH7.5npm
GHSA-wcpc-wj8m-hjx6· CVE-2026-48712protobufjs: Denial of service through unbounded Any expansion during JSON conversion
Modified: 9/10/2026
CRITICAL9.8npm
GHSA-xq3m-2v4x-88gg· CVE-2026-41242Arbitrary code execution in protobufjs
Modified: 9/10/2026