CVE-2026-54269
- EPSS 0.24%
- Veröffentlicht 22.06.2026 16:23:24
- Zuletzt bearbeitet 24.06.2026 20:40:20
protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 8.6.0 and 7.6.3, protobufjs accepted certain schema-derived names that could collide with properties used by protobufjs runtime helpers. The known affected names are fi...
CVE-2026-54270
- EPSS 0.29%
- Veröffentlicht 22.06.2026 16:19:20
- Zuletzt bearbeitet 24.06.2026 20:39:18
protobufjs compiles protobuf definitions into JavaScript (JS) functions. From 8.2.0 to 8.4.2, protobufjs preserved unknown wire elements in message.$unknowns and did not provide a decode-time option to discard unknown fields before retaining them. A ...
CVE-2026-45740
- EPSS 0.26%
- Veröffentlicht 13.05.2026 14:46:02
- Zuletzt bearbeitet 13.05.2026 20:50:15
protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.8 and 8.2.0, protobufjs could recurse without a depth limit while expanding nested JSON descriptors through Root.fromJSON() and Namespace.addJSON(). A crafted JSON ...
CVE-2026-44294
- EPSS 0.43%
- Veröffentlicht 13.05.2026 14:44:30
- Zuletzt bearbeitet 13.05.2026 20:55:23
protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated JavaScript property accessors from schema-controlled field and oneof names. Certain control characters in field names were not esc...
CVE-2026-44293
- EPSS 0.29%
- Veröffentlicht 13.05.2026 14:43:33
- Zuletzt bearbeitet 13.05.2026 20:56:57
protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated JavaScript for toObject conversion could include an unsafe expression derived from a schema-controlled bytes field default value. ...
CVE-2026-44292
- EPSS 0.26%
- Veröffentlicht 13.05.2026 14:42:55
- Zuletzt bearbeitet 13.05.2026 20:58:32
protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated message constructors copied enumerable properties from a provided properties object without filtering the __proto__ key. If an app...
CVE-2026-44291
- EPSS 0.5%
- Veröffentlicht 13.05.2026 14:42:13
- Zuletzt bearbeitet 14.05.2026 12:22:14
protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs used plain objects with inherited prototypes for internal type lookup tables used by generated encode and decode functions. If Object.protot...
CVE-2026-44290
- EPSS 0.37%
- Veröffentlicht 13.05.2026 14:41:15
- Zuletzt bearbeitet 14.05.2026 12:23:20
protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs allowed certain schema option paths to traverse through inherited object properties while applying options. A crafted protobuf schema or JSO...
CVE-2026-44289
- EPSS 0.4%
- Veröffentlicht 13.05.2026 14:39:09
- Zuletzt bearbeitet 13.05.2026 20:50:50
protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs could recurse without a depth limit while decoding nested protobuf data. This affected both skipping unknown group fields and generated deco...
CVE-2026-44288
- EPSS 0.3%
- Veröffentlicht 13.05.2026 14:37:26
- Zuletzt bearbeitet 19.05.2026 20:46:53
protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs includes a minimal UTF-8 decoder that accepted overlong UTF-8 byte sequences and decoded them to their canonical characters instead of repla...