6 matches found
@agentgate-hedera/mcp (>=0.1.1, <=0.1.7), @agentgate-hedera/passport (>=0.1.1, <=0.1.9) +118 more potentially affected by CVE-2026-59876 via protobufjs (>=8.2.0, <=8.6.4)
protobufjs NPM version =8.2.0, =0.1.1, =0.1.1, =1.16.0, =1.0.5, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.1.37, =0.1.29, =9.1.1-az29, =9.1.1-az31 - @freon4dsl/core 3.0.0-beta.1 and more Source cves: CVE-2026-59876 Source advisory: OSV:GHSA-JFJ6-75FJ-8934...
@agentgate-hedera/mcp (>=0.1.1, <=0.1.7), @agentgate-hedera/passport (>=0.1.1, <=0.1.9) +118 more potentially affected by CVE-2026-59876 via protobufjs (>=8.2.0, <=8.6.4)
protobufjs NPM version =8.2.0, =0.1.1, =0.1.1, =1.16.0, =1.0.5, =0.0.4, =0.0.4, =0.0.4, =0.0.4, =0.1.37, =0.1.29, =9.1.1-az29, =9.1.1-az31 - @freon4dsl/core 3.0.0-beta.1 and more Source cves: CVE-2026-59876 Source advisory: SNYK:JS-PROTOBUFJS-17900554...
@forwardimpact/libcodegen (>=0.1.47, <=0.1.52) potentially affected by CVE-2026-59876 via protobufjs-cli (2.0.1)
protobufjs-cli NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobufjs-cli and may be impacted: - @forwardimpact/libcodegen =0.1.47, =0.1.52 Source cves: CVE-2026-59876 Source advisory: SNYK:JS-PROTOBUFJSCLI-17900555...
CVE-2026-59876
protobufjs compiles protobuf definitions into JavaScript JS functions. From 8.2.0 until 8.6.5, the protobufjs Text Format extension parsed string-keyed map entries using ordinary property assignment, allowing a map entry with key proto to change the prototype of the returned map object instead of...
