Google protobuf-javascript (aka google-protobuf npm package)

• CVE-2026-89418 High 8.7 Uncontrolled Recursion leading to Denial of Service in protobuf-javascript (google-protobuf) 0.3%