CVE-2018-3738

protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.

Score

CVSS 3.1 5.5 Medium

Status

Modified - support@hackerone.com

Published

2018-06-07

Last modified

2024-09-16

Weaknesses

CWE-185, CWE-770

Affected products

• Protobufjs Node Module (Hackerone)
• Protobufjs (Protobufjs Project)

References

• https://hackerone.com/reports/319576