CVE-2026-59877

A flaw was found in protobufjs, a JavaScript JS library for compiling protobuf definitions. A remote attacker could exploit this vulnerability by providing a specially crafted .proto schema. This schema, designed to prematurely end an option declaration, can cause the library's parsing functions ...

@0xchain/telemetry (>=1.1.0-beta.8, <=1.1.0-beta.18), @20206205tech/nestjs-common (>=0.8.0, <=0.11.3) +1114 more potentially affected by CVE-2026-59877 via protobufjs (>=8.0.0, <=8.6.5)

protobufjs NPM version =8.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =0.3.1, =0.3.1, =0.7.1, =0.7.0, =0.6.0, =0.8.0 and more Source cves: CVE-2026-59877 Source advisory: OSV:GHSA-J3F2-48V5-CCWW...

@acedatacloud/nexior (>=3.26.0, <=3.142.0), @aliceo2/bookkeeping (>=1.9.1, <=1.15.0) +702 more potentially affected by CVE-2026-59877 via protobufjs (>=7.5.0, <=7.6.4)

protobufjs NPM version =7.5.0, =3.26.0, =1.9.1, =2.1.7-alpha-2, =0.1.0, =1.0.0-canary.15, =0.0.2, =0.0.1, =0.0.0-experimental-02e44603-20260603, =0.0.0-experimental-02e44603-20260603, =0.0.0-experimental-02e44603-20260603, =0.3.0, =0.0.1-alpha.1, =0.1.0, =1.0.1 and more Source cves: CVE-2026-5987...

@acedatacloud/nexior (>=3.26.0, <=3.142.0), @aliceo2/bookkeeping (>=1.9.1, <=1.15.0) +702 more potentially affected by CVE-2026-59877 via protobufjs (>=7.5.0, <=7.6.4)

protobufjs NPM version =7.5.0, =3.26.0, =1.9.1, =2.1.7-alpha-2, =0.1.0, =1.0.0-canary.15, =0.0.2, =0.0.1, =0.0.0-experimental-02e44603-20260603, =0.0.0-experimental-02e44603-20260603, =0.0.0-experimental-02e44603-20260603, =0.3.0, =0.0.1-alpha.1, =0.1.0, =1.0.1 and more Source cves: CVE-2026-5987...

@acedatacloud/nexior (>=3.26.0, <=3.142.0), @aliceo2/bookkeeping (>=1.9.1, <=1.15.0) +702 more potentially affected by CVE-2026-59877 via protobufjs (>=7.5.0, <=7.6.4)

protobufjs NPM version =7.5.0, =3.26.0, =1.9.1, =2.1.7-alpha-2, =0.1.0, =1.0.0-canary.15, =0.0.2, =0.0.1, =0.0.0-experimental-02e44603-20260603, =0.0.0-experimental-02e44603-20260603, =0.0.0-experimental-02e44603-20260603, =0.3.0, =0.0.1-alpha.1, =0.1.0, =1.0.1 and more Source cves: CVE-2026-5987...

@0xchain/telemetry (>=1.1.0-beta.8, <=1.1.0-beta.18), @20206205tech/nestjs-common (>=0.8.0, <=0.11.3) +1114 more potentially affected by CVE-2026-59877 via protobufjs (>=8.0.0, <=8.6.5)

protobufjs NPM version =8.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =0.3.1, =0.3.1, =0.7.1, =0.7.0, =0.6.0, =0.8.0 and more Source cves: CVE-2026-59877 Source advisory: MEND:CVE-2026-59877...