Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

protobufjs Security Vulnerabilities | CyStack CVE Database

protobuf.js Project maintains an open-source JavaScript and TypeScript implementation of Protocol Buffers. It provides libraries and command-line tooling for applications that load schemas, serialize and deserialize messages, use reflection, or generate schema-specific code without requiring protoc.

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-59876`protobufjs: Text Format string map parsing can mutate returned map object prototype	Exploitation statusNot known exploited	FixYes	Affected productprotobuf.js	Published07/08/2026	SeverityMedium
`CVE-2026-59877`protobufjs: Denial of Service via infinite loop in .proto option parsing	Exploitation statusNot known exploited	FixYes	Affected productprotobuf.js	Published07/08/2026	SeverityMedium
`CVE-2026-54269`protobufjs: Schema-derived names can shadow runtime-significant properties	Exploitation statusNot known exploited	FixYes	Affected productprotobuf.js	Published06/22/2026	SeverityMedium
`CVE-2026-48712`protobufjs: Denial of service through unbounded Any expansion during JSON conversion	Exploitation statusNot known exploited	FixYes	Affected productprotobuf.js	Published06/22/2026	SeverityHigh
`CVE-2026-54270`protobufjs: Memory amplification from preserved unknown fields in binary decode	Exploitation statusNot known exploited	FixNot confirmed	Affected productprotobuf.js	Published06/22/2026	SeverityMedium
`CVE-2026-54271`protobufjs-cli: Code injection in pbjs static output from crafted JSON descriptor names	Exploitation statusNot known exploited	FixYes	Affected productprotobufjs-cli	Published06/22/2026	SeverityHigh
`CVE-2026-44295`protobufjs-cli: Code injection in pbjs static output from crafted schema names	Exploitation statusNot known exploited	FixYes	Affected productprotobuf.js	Published05/13/2026	SeverityHigh
`CVE-2026-42290`protobufjs-cli: OS Command Injection	Exploitation statusNot known exploited	FixYes	Affected productprotobuf.js	Published05/13/2026	SeverityHigh
`CVE-2026-45740`protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion	Exploitation statusNot known exploited	FixYes	Affected productprotobuf.js	Published05/13/2026	SeverityMedium
`CVE-2026-44294`protobufjs: Denial of service from crafted field names in generated code	Exploitation statusNot known exploited	FixYes	Affected productprotobuf.js	Published05/13/2026	SeverityMedium
`CVE-2026-44293`protobufjs: Code injection through bytes field defaults in generated toObject code	Exploitation statusNot known exploited	FixYes	Affected productprotobuf.js	Published05/13/2026	SeverityHigh
`CVE-2026-44292`protobufjs: Prototype injection in generated message constructors	Exploitation statusNot known exploited	FixYes	Affected productprotobuf.js	Published05/13/2026	SeverityMedium
`CVE-2026-44291`protobufjs: Code generation gadget after prototype pollution	Exploitation statusNot known exploited	FixYes	Affected productprotobuf.js	Published05/13/2026	SeverityHigh
`CVE-2026-44290`protobufjs: Process-wide denial of service through unsafe option paths	Exploitation statusNot known exploited	FixYes	Affected productprotobuf.js	Published05/13/2026	SeverityHigh
`CVE-2026-44289`protobufjs: Denial of service through unbounded protobuf recursion	Exploitation statusNot known exploited	FixYes	Affected productprotobuf.js	Published05/13/2026	SeverityHigh
`CVE-2026-44288`protobufjs: Overlong UTF-8 decoding	Exploitation statusNot known exploited	FixYes	Affected productprotobuf.js	Published05/13/2026	SeverityMedium
`CVE-2026-41242`protobufjs has an arbitrary code execution issue	Exploitation statusPublic exploit	FixNot confirmed	Affected productprotobuf.js	Published04/18/2026	SeverityCritical

17 / 17 Results

All vulnerabilities loaded

Security vulnerabilities from protobufjs

protobufjs

How many security vulnerabilities does protobufjs have?

Which protobufjs product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular protobufjs products

protobuf.js

protobufjs-cli