HIGH8.7npm
GHSA-6r35-46g8-jcw9· CVE-2026-44295protobuf.js: Code injection in pbjs static output from crafted schema names
Modified: 9/10/2026
package
npm/protobufjs-cli
pkg:npm/protobufjs-cli
MEDIUM5.3npm
GHSA-f38q-mgvj-vph7· CVE-2026-54269protobufjs : Schema-derived names can shadow runtime-significant properties
Modified: 9/10/2026
HIGH7.8npm
GHSA-f84p-cvgm-xgjj· CVE-2026-42290protobuf.js is Vulnerable to OS Command Injection in the CLI
Modified: 9/10/2026
HIGH8.2npm
GHSA-pr59-h9ph-3fr8· CVE-2026-54271protobufjs-cli: Code injection in pbjs static output from crafted JSON descriptor names
Modified: 9/10/2026