protobufjs protobuf.js

• CVE-2026-59876 Medium 4.8 protobufjs: Text Format string map parsing can mutate returned map object prototype 0.3%
• CVE-2026-59877 Medium 5.3 protobufjs: Denial of Service via infinite loop in .proto option parsing 0.4%
• CVE-2026-54269 Medium 5.3 protobufjs: Schema-derived names can shadow runtime-significant properties 0.4%
• CVE-2026-48712 High 7.5 protobufjs: Denial of service through unbounded Any expansion during JSON conversion 0.5%
• CVE-2026-54270 Medium 5.3 protobufjs: Memory amplification from preserved unknown fields in binary decode 0.4%
• CVE-2026-44295 High 8.7 protobufjs-cli: Code injection in pbjs static output from crafted schema names 0.4%
• CVE-2026-42290 High 7.8 protobufjs-cli: OS Command Injection 0.1%
• CVE-2026-45740 Medium 5.3 protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion 0.3%
• CVE-2026-44294 Medium 5.3 protobufjs: Denial of service from crafted field names in generated code 0.4%
• CVE-2026-44293 High 7.1 protobufjs: Code injection through bytes field defaults in generated toObject code 0.4%
• CVE-2026-44292 Medium 5.3 protobufjs: Prototype injection in generated message constructors 0.3%
• CVE-2026-44291 High 8.1 protobufjs: Code generation gadget after prototype pollution 0.5%
• CVE-2026-44290 High 7.5 protobufjs: Process-wide denial of service through unsafe option paths 0.4%
• CVE-2026-44289 High 7.5 protobufjs: Denial of service through unbounded protobuf recursion 0.6%
• CVE-2026-44288 Medium 5.3 protobufjs: Overlong UTF-8 decoding 0.3%
• CVE-2026-41242 High 8.8 protobufjs has an arbitrary code execution issue 0.8%