GHSA-94RC-8X27-4472 protobufjs: Memory amplification from preserved unknown fields in binary decode
Summary protobufjs 8.2.0 added support for preserving unknown fields encountered during binary decode. Affected versions preserved unknown wire elements in message.$unknowns and did not provide a decode-time option to discard unknown fields before retaining them. A crafted protobuf payload...