533 matches found
ROOT-APP-NPM-CVE-2026-48712 CVE-2026-48712 in protobufjs - Patched by Root
Root has patched CVE-2026-48712 in the protobufjs package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2023-36665 CVE-2023-36665 in protobufjs - Patched by Root
Root has patched CVE-2023-36665 in the protobufjs package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2022-25878 CVE-2022-25878 in protobufjs - Patched by Root
Root has patched CVE-2022-25878 in the protobufjs package for Root:npm. Multiple fixed versions available...
Security Bulletin: Manage Component uses protobufjs-8.0.1.tgz and utf8-1.1.0.tgz in map-component app which is vulnerable to CVE-2026-44288, CVE-2026-44289, CVE-2026-44290, CVE-2026-44291, CVE-2026-44292, CVE-2026-44293 and CVE-2026-44294
Summary Manage Component uses protobufjs-8.0.1.tgz and utf8-1.1.0.tgz in map-component app which is vulnerable to CVE-2026-44288, CVE-2026-44289, CVE-2026-44290, CVE-2026-44291, CVE-2026-44292, CVE-2026-44293 and CVE-2026-44294. This security bulletin provides details about the vulnerability and...
Security Bulletin: Vulnerability in protobufjs affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.
Summary Potential vulnerability in protobufjs has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...
protobufjs: protobufjs: Denial of Service via crafted JSON descriptors
A flaw was found in protobufjs. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a crafted JSON descriptor with deeply nested namespace definitions. This can lead to the exhaustion of the JavaScript call stack during descriptor loading, making the...
protobufjs: protobufjs: Denial of Service via crafted .proto schema
A flaw was found in protobufjs, a JavaScript JS library for compiling protobuf definitions. A remote attacker could exploit this vulnerability by providing a specially crafted .proto schema. This schema, designed to prematurely end an option declaration, can cause the library's parsing functions ...
Exploit for Code Injection in Protobufjs_Project Protobufjs
CVE-2026-41242 — protobuf.js Code Injection to RCE CVSS 9.4...
Security Bulletin: IBM watsonx Orchestrate Developer Edition is vulnerable to Arbitrary code execution / potential denial of service via crafted fields due to protobufjs
Summary protobufjs is used by IBM watsonx Orchestrate Developer Edition as part of WatsonOrchestrate/agentic-task-manager and WatsonOrchestrate/wxo-builder-ui repositories. Vulnerability Details ID:WS-2026-0004 DESCRIPTION: Arbitrary code execution in protobufjs. protobufjs compiles protobuf...
CVE-2026-15656
CVE-2026-15656 affects IBM Maximo Application Suite (MAS) 9.2, 9.1, and 9.0. The issue is that authorization tokens and session cookies are not marked with the Secure attribute, allowing cookies to be exposed if a user visits an http link or a site containing such a link. As described in the conn...
CVE-2026-18531 IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session Secret
IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due to the use of a weak HMAC session signing secret...
CLSA-2026-1785468075 TuxCare security update for protobufjs (11 CVEs)
TuxCare rebuilt protobufjs to address 11 CVEs. Fixed in 6.8.8-tuxcare.1...
CLSA-2026-1785380800 TuxCare security update for protobufjs (4 CVEs)
TuxCare rebuilt protobufjs to address 4 CVEs. Fixed in 0.12.13-tuxcare.1...
CLSA-2026-1785291242 TuxCare security update for protobufjs (1 CVE)
TuxCare rebuilt protobufjs to address 1 CVE. Fixed in 5.0.0-tuxcare.1...
CLSA-2026-1785380788 TuxCare security update for protobufjs (4 CVEs)
TuxCare rebuilt protobufjs to address 4 CVEs. Fixed in 1.5.1-tuxcare.1...
CLSA-2026-1784769544 TuxCare security update for protobufjs (8 CVEs)
TuxCare rebuilt protobufjs to address 8 CVEs. Fixed in 2.2.1-tuxcare.1...
CLSA-2026-1784164061 TuxCare security update for 2 packages (4 CVEs)
TuxCare rebuilt 2 packages to address 4 CVEs. Fixed in 6.10.2-tuxcare.1...
CLSA-2026-1784250508 TuxCare security update for protobufjs (6 CVEs)
TuxCare rebuilt protobufjs to address 6 CVEs. Fixed in 6.11.6-tuxcare.4...