MEDIUM5.5
GHSA-762f-c2wg-m8c8
Denial of Service in protobufjs
Quick fix
GHSA-762f-c2wg-m8c8 — protobufjs: upgrade to the fixed version with the command below.
npm install protobufjs@6.8.6Details
Versions of `protobufjs` before 5.0.3 and 6.8.6 are vulnerable to a regular expression denial of service when parsing crafted invalid *.proto files.
## Recommendation
Update to version 5.0.3, 6.8.6 or later.
Are you affected?
Enter the version of the package you're using.