CLSA-2026-1778805971 TuxCare security update for protobufjs (1 CVE)

TuxCare rebuilt protobufjs to address 1 CVE. Fixed in 6.11.6-tuxcare.2...

CLSA-2026-1778114667 TuxCare security update for protobufjs (1 CVE)

TuxCare rebuilt protobufjs to address 1 CVE. Fixed in 6.11.6-tuxcare.1...

PT-2026-75458

TuxCare rebuilt protobufjs to address 6 CVEs. Fixed in 6.11.6-tuxcare.4...

PT-2026-75648

TuxCare rebuilt protobufjs to address 8 CVEs. Fixed in 2.2.1-tuxcare.1...

PT-2026-75826

TuxCare rebuilt protobufjs to address 4 CVEs. Fixed in 1.5.1-tuxcare.1...

PT-2026-75843

TuxCare rebuilt protobufjs to address 11 CVEs. Fixed in 6.8.8-tuxcare.1...

PT-2026-75795

TuxCare rebuilt protobufjs to address 1 CVE. Fixed in 5.0.0-tuxcare.1...

PT-2026-74761

TuxCare rebuilt protobufjs to address 1 CVE. Fixed in 6.11.6-tuxcare.2...

PT-2026-75845

TuxCare rebuilt protobufjs to address 7 CVEs. Fixed in 5.0.0-tuxcare.2...

PT-2026-75827

TuxCare rebuilt protobufjs to address 4 CVEs. Fixed in 0.12.13-tuxcare.1...

PT-2026-74702

TuxCare rebuilt protobufjs to address 1 CVE. Fixed in 6.11.6-tuxcare.1...

PT-2026-74983

TuxCare rebuilt 9 @protobufjs packages to address 1 CVE. Fixed in 1.1.0-tuxcare.1...

PT-2026-74857

TuxCare rebuilt protobufjs to address 3 CVEs. Fixed in 6.11.6-tuxcare.3...

Important: Red Hat Security Advisory: Kiali 2.22.8 for Red Hat OpenShift Service Mesh 3.3

Kiali 2.22.8 for Red Hat OpenShift Service Mesh 3.3 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Security Bulletin: IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session Secret

Summary IBM Maximo Application Suite uses axios-1.15.2.tgz, protobufjs-8.0.1.tgz, protobufjs-8.2.0.tgz and undici-7.26.0.tgz which is vulnerable to CVE-2026-11525, CVE-2026-12151, CVE-2026-6733, CVE-2026-6734, CVE-2026-9678, CVE-2026-9679, CVE-2026-9697, CVE-2026-54270, CVE-2026-45740,...

Security Bulletin: There are vulnerabilities in jackson-databind-2.18.6.jar, protobufjs-8.3.0.tgz and fast-uri-3.1.2.tgz used by IBM Maximo Manage application in IBM Maximo Application Suite which are affected by multiple CVEs

Summary There are vulnerabilities in jackson-databind-2.18.6.jar, protobufjs-8.3.0.tgz and fast-uri-3.1.2.tgz used by IBM Maximo Manage application in IBM Maximo Application Suite which are affected by multiple CVEs mentioned below. Vulnerability Details CVEID:CVE-2026-48712 DESCRIPTION: protobuf...

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple Node.js modules

Summary IBM App Connect Enterprise runtime, IBM App Connect Enterprise Discovery Connectors and IBM App Connect Enterprise Connector Discovery and OpenAPI Editor are vulnerable to multiple vulnerabilities due to Node.js modules undici, js-yaml, fast-uri, protobufjs and @opentelemetry/core...

ROOT-APP-NPM-CVE-2026-54270 CVE-2026-54270 in @rootio/protobufjs - Patched by Root

Root has patched CVE-2026-54270 in the @rootio/protobufjs package for Root:npm. Multiple fixed versions available...

SUSE CVE-2026-59877

protobufjs compiles protobuf definitions into JavaScript JS functions. Prior to 7.6.5 and 8.6.6, protobufjs parsed option names by advancing through schema tokens until reaching an = token without checking for end of input, so a crafted .proto schema that opens an option declaration and ends...

CVE-2026-59877

A flaw was found in protobufjs, a JavaScript JS library for compiling protobuf definitions. A remote attacker could exploit this vulnerability by providing a specially crafted .proto schema. This schema, designed to prematurely end an option declaration, can cause the library's parsing functions ...