GHSA-J3F2-48V5-CCWW protobufjs: Denial of Service via infinite loop in .proto option parsing

Summary protobufjs parsed option names by advancing through schema tokens until it reached an = token, without checking for end of input. A crafted .proto schema that opens an option declaration but ends prematurely could cause the option parser to loop without ever terminating. This affects the...

NPM: protobufjs: Denial of Service via infinite loop in .proto option parsing

NPM: protobufjs: Denial of Service via infinite loop in .proto option parsing vulnerability discovered by ? in WordPress Npm protobufjs versions = 7.5.0, = 7.6.4...

EUVD-2026-42310

protobufjs: Denial of Service via infinite loop in .proto option parsing...

Astra Linux – vulnerability in curl

When a protocol selection parameter option disables all protocols without adding any other protocols, the default set of protocols remains in the allowed list due to an error in the logic used to remove protocols. The following command sends a request to curl.se using a plaintext protocol that ha...