Protobufjs Project

Protobufjs

17 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
  • EPSS 0.22%
  • Veröffentlicht 08.07.2026 15:31:11
  • Zuletzt bearbeitet 13.07.2026 15:02:37

protobufjs compiles protobuf definitions into JavaScript (JS) functions. From 8.2.0 until 8.6.5, the protobufjs Text Format extension parsed string-keyed map entries using ordinary property assignment, allowing a map entry with key __proto__ to chang...

  • EPSS 0.37%
  • Veröffentlicht 08.07.2026 15:28:07
  • Zuletzt bearbeitet 10.07.2026 18:53:14

protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.5 and 8.6.6, protobufjs parsed option names by advancing through schema tokens until reaching an = token without checking for end of input, so a crafted .proto sche...

  • EPSS 0.4%
  • Veröffentlicht 22.06.2026 16:23:24
  • Zuletzt bearbeitet 24.06.2026 20:40:20

protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 8.6.0 and 7.6.3, protobufjs accepted certain schema-derived names that could collide with properties used by protobufjs runtime helpers. The known affected names are fi...

  • EPSS 0.46%
  • Veröffentlicht 22.06.2026 16:21:21
  • Zuletzt bearbeitet 26.06.2026 20:04:06

protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.1 and 8.4.1, protobufjs could recurse without a depth limit while converting decoded messages to plain objects or JSON. This affected generated toObject() conversio...

  • EPSS 0.4%
  • Veröffentlicht 22.06.2026 16:19:20
  • Zuletzt bearbeitet 24.06.2026 20:39:18

protobufjs compiles protobuf definitions into JavaScript (JS) functions. From 8.2.0 to 8.4.2, protobufjs preserved unknown wire elements in message.$unknowns and did not provide a decode-time option to discard unknown fields before retaining them. A ...

  • EPSS 0.26%
  • Veröffentlicht 13.05.2026 14:46:02
  • Zuletzt bearbeitet 13.05.2026 20:50:15

protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.8 and 8.2.0, protobufjs could recurse without a depth limit while expanding nested JSON descriptors through Root.fromJSON() and Namespace.addJSON(). A crafted JSON ...

Medienbericht
  • EPSS 0.43%
  • Veröffentlicht 13.05.2026 14:44:30
  • Zuletzt bearbeitet 13.05.2026 20:55:23

protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated JavaScript property accessors from schema-controlled field and oneof names. Certain control characters in field names were not esc...

  • EPSS 0.39%
  • Veröffentlicht 13.05.2026 14:43:33
  • Zuletzt bearbeitet 20.08.2026 13:18:39

protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated JavaScript for toObject conversion could include an unsafe expression derived from a schema-controlled bytes field default value. ...

Medienbericht
  • EPSS 0.26%
  • Veröffentlicht 13.05.2026 14:42:55
  • Zuletzt bearbeitet 13.05.2026 20:58:32

protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated message constructors copied enumerable properties from a provided properties object without filtering the __proto__ key. If an app...

Medienbericht
  • EPSS 0.5%
  • Veröffentlicht 13.05.2026 14:42:13
  • Zuletzt bearbeitet 14.05.2026 12:22:14

protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs used plain objects with inherited prototypes for internal type lookup tables used by generated encode and decode functions. If Object.protot...