ROOT-APP-NPM-CVE-2023-36665 CVE-2023-36665 in protobufjs - Patched by Root

🗓️ 31 Aug 2026 10:21:47Reported by GoogleType

osv🔗 osv.dev👁 13 Views

Root patched the 2023-36665 vulnerability in the Rootio Protobufjs library for Root npm.

Reporter	Title	Published	Views	Family All 32
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js modules affect IBM Voice Gateway	14 Aug 202319:58	–	ibm
IBM Security Bulletins	Security Bulletin: protobuf.js component is vulnerable which is used by IBM Maximo Application Suite [CVE-2023-36665]	29 Aug 202321:00	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	15 Feb 202413:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to a remote attack and a denial of service due to Node.js modules protobuf.js, vm2 and word-wrap [CVE-2023-36665, CVE-2023-37903, CVE-2023-37466 and CVE-2023-26115]	11 Sep 202316:26	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities	11 Aug 202516:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands that use Google PubSub nodes are vulnerable to arbitrary code execution due to [CVE-2023-36665]	31 Jul 202317:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Prototype Pollution in Grafana (CVE-2023-36665)	22 Jul 202422:17	–	ibm
ATTACKERKB	CVE-2023-36665	5 Jul 202314:15	–	attackerkb
Chainguard	CVE-2023-36665 vulnerabilities	22 Mar 202510:12	–	cgr
Circl	CVE-2023-36665	5 Jul 202318:21	–	circl

31 Aug 2026 11:30Current

7.2High risk

Vulners AI Score7.2

CVSS 3.19.8

EPSS0.01683

SSVC

root npm rootio protobufjs vulnerability 2023-36665 patched by root multiple fixed versions