Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-3738
5.5
MEDIUMCVSS v3
Severity scale
010
Description
protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.
protobufjs
NPMProtocol Buffers for JavaScript & TypeScript.
NPMProtocol Buffers for JavaScript & TypeScript.= 6.8.5, <= 6.8.5, >= 6.0.0, < 6.8.6, < 5.0.3NVD
@types/protobufjsNPMStub TypeScript definitions entry for ProtoBuf.js, which provides its own types definitions
NPMStub TypeScript definitions entry for ProtoBuf.js, which provides its own types definitions= 6.8.5, <= 6.8.5, >= 6.0.0, < 6.8.6, < 5.0.3NVD