protobufjs
js · protobufjsHeads-up
protobufjs 8.2.0–8.6.1: Unknown fields cause memory pressure
protobufjs versions 8.2.0 through 8.6.1 preserve unknown fields during binary decode, leading to memory pressure from crafted payl
16 Jun 2026 · schedule it
js · protobufjsCritical
protobufjs: Unbounded Recursion in toObject() and Any JSON Conversion
protobufjs could recurse without a depth limit while converting decoded messages to plain objects or JSON, affecting generated toO
16 Jun 2026 · act now