27 matches found
CVE-2018-3738
protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files...
Code injection
protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files...
CVE-2018-3738
protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files...
CVE-2018-3738
protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files...
CVE-2018-3738
protobufjs is affected by a Denial of Service via a regular expression denial of service when parsing crafted invalid .proto files. Affected versions are prior to 5.0.3 and prior to 6.8.6. Remediation: upgrade to protobufjs 5.0.3 or later, or 6.8.6 or later. The issue arises from ReDoS during par...
CVE-2018-3738: Allocation of Resources Without Limits or Throttling
protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files...
Denial of Service
Overview Versions of protobufjs before 5.0.3 and 6.8.6 are vulnerable to denial of service when parsing crafted invalid .proto files. Recommendation Update to version 5.0.3, 6.8.6 or later. References - https://github.com/dcodeIO/protobuf.js/blob/6.8.5/src/parse.jsL27 - HackerOne Report - GitHub...