Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 20
Reset filtersprotobufjs: Denial of Service via infinite loop in .proto option parsing
protobufjs-cli: Code injection in pbjs static output from crafted JSON descriptor names
protobufjs: Memory amplification from preserved unknown fields in binary decode
protobufjs: Denial of service through unbounded Any expansion during JSON conversion
protobufjs : Schema-derived names can shadow runtime-significant properties
protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion
protobuf.js: Code injection in pbjs static output from crafted schema names
protobuf.js: Denial of service from crafted field names in generated code
protobuf.js: Code injection through bytes field defaults in generated toObject code
protobuf.js: Prototype injection in generated message constructors
protobuf.js: Code generation gadget after prototype pollution
protobuf.js: Process-wide denial of service through unsafe option paths
protobuf.js: Denial of service through unbounded protobuf recursion
protobufjs has overlong UTF-8 decoding
protobuf.js is Vulnerable to OS Command Injection in the CLI
Arbitrary code execution in protobufjs
protobufjs Prototype Pollution vulnerability
Prototype Pollution in protobufjs
Denial of Service in protobufjs
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.