Protobufjs vulnerabilities

Products

• Protobuf.js 16

Newest

• protobufjs project protobufjs, protobufjs protobuf.js +1 more protobufjs: Text Format string map parsing can mutate returned map object prototype CVE-2026-59876 Fix available 4.8 MediumJuly 8, 2026
• protobufjs project protobufjs, protobufjs protobuf.js +1 more protobufjs: Denial of Service via infinite loop in .proto option parsing CVE-2026-59877 Fix available 5.3 MediumJuly 8, 2026
• protobufjs protobufjs-cli protobufjs-cli: Code injection in pbjs static output from crafted JSON descriptor names CVE-2026-54271 Fix available 8.2 HighJune 15, 2026
• protobufjs project protobufjs, protobufjs protobuf.js +1 more protobufjs: Memory amplification from preserved unknown fields in binary decode CVE-2026-54270 Fix available 5.3 MediumJune 15, 2026
• protobufjs project protobufjs, protobufjs protobuf.js +1 more protobufjs: Denial of service through unbounded Any expansion during JSON conversion CVE-2026-48712 Fix available 7.5 HighJune 15, 2026
• protobufjs project protobufjs, protobufjs protobuf.js, protobufjs project protobufjs-cli +2 more protobufjs: Schema-derived names can shadow runtime-significant properties CVE-2026-54269 Fix available 5.3 MediumJune 15, 2026
• protobufjs project protobufjs, protobufjs protobuf.js +1 more protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion CVE-2026-45740 Fix available 5.3 MediumMay 13, 2026
• protobufjs protobuf.js, protobufjs project protobufjs-cli +1 more protobufjs-cli: Code injection in pbjs static output from crafted schema names CVE-2026-44295 Fix available 8.7 HighMay 12, 2026
• protobufjs project protobufjs, protobufjs protobuf.js +1 more protobufjs: Denial of service from crafted field names in generated code CVE-2026-44294 Fix available 5.3 MediumMay 12, 2026
• protobufjs project protobufjs, protobufjs protobuf.js, red hat openshift pipelines +20 more +22 more protobufjs: Code injection through bytes field defaults in generated toObject code CVE-2026-44293 Fix available 7.7 HighMay 12, 2026
• protobufjs project protobufjs, protobufjs protobuf.js +1 more protobufjs: Prototype injection in generated message constructors CVE-2026-44292 Fix available 5.3 MediumMay 12, 2026
• protobufjs project protobufjs, protobufjs protobuf.js +1 more protobufjs: Code generation gadget after prototype pollution CVE-2026-44291 Fix available 8.1 HighMay 12, 2026
• protobufjs project protobufjs, protobufjs protobuf.js +1 more protobufjs: Process-wide denial of service through unsafe option paths CVE-2026-44290 Fix available 7.5 HighMay 12, 2026
• protobufjs project protobufjs, protobufjs protobuf.js, red hat openshift pipelines +13 more +15 more protobufjs: Denial of service through unbounded protobuf recursion CVE-2026-44289 Fix available 7.5 HighMay 12, 2026
• protobufjs project protobufjs, protobufjs protobuf.js +1 more protobufjs: Overlong UTF-8 decoding CVE-2026-44288 Fix available 5.3 MediumMay 12, 2026
• protobufjs protobuf.js, protobufjs project protobufjs-cli +1 more protobufjs-cli: OS Command Injection CVE-2026-42290 Fix available 7.8 HighMay 12, 2026
• protobufjs project protobufjs, protobufjs protobuf.js, red hat cryostat 4 +20 more +22 more protobufjs has an arbitrary code execution issue CVE-2026-41242 Public exploitFix available 9.4 CriticalApril 16, 2026