Protobuf-javascript Aka Google-protobuf Npm Package (Google) - vulnerabilities (CVEs)
1 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-17. Vendor: Google.
CVEs of Protobuf-javascript Aka Google-protobuf Npm Package
- CVE-2026-89418 - CVSS 8.7 (high), 2026-09-17: google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small crafted payload of deeply nested…
