CLSA-2026-1791218903 TuxCare security update for protobufjs (11 CVEs)

TuxCare rebuilt protobufjs to address 11 CVEs. Fixed in 7.4.0-tuxcare.1...

CVE-2026-41242

CVE-2026-41242 — protobuf.js コードインジェクションによるRCE CVSS 9.4（クリティカル） | コードインジェクション（CWE-94） 概要 protobuf.js（npm: protobufjs）バージョン ≤ 7.5.4 および ≤ 8.0.0 には、protobufスキーマ内のタイプ名を介した任意コード実行 の脆弱性があります。@protobufjs/codegen モジュールはタイプ名をJavaScript文字列に直接連結し、Function コンストラクタ（eval...

CLSA-2026-1790770894 TuxCare security update for protobufjs (4 CVEs)

TuxCare rebuilt protobufjs to address 4 CVEs. Fixed in 6.11.3-tuxcare.1...

ROOT-APP-NPM-CVE-2026-48712 CVE-2026-48712 in protobufjs - Patched by Root

Root has patched CVE-2026-48712 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44289 CVE-2026-44289 in protobufjs - Patched by Root

Root has patched CVE-2026-44289 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44290 CVE-2026-44290 in protobufjs - Patched by Root

Root has patched CVE-2026-44290 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-45740 CVE-2026-45740 in protobufjs - Patched by Root

Root has patched CVE-2026-45740 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-59877 CVE-2026-59877 in protobufjs - Patched by Root

Root has patched CVE-2026-59877 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44293 CVE-2026-44293 in protobufjs - Patched by Root

Root has patched CVE-2026-44293 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44292 CVE-2026-44292 in protobufjs - Patched by Root

Root has patched CVE-2026-44292 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44294 CVE-2026-44294 in protobufjs - Patched by Root

Root has patched CVE-2026-44294 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44291 CVE-2026-44291 in protobufjs - Patched by Root

Root has patched CVE-2026-44291 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44288 CVE-2026-44288 in protobufjs - Patched by Root

Root has patched CVE-2026-44288 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-54269 CVE-2026-54269 in protobufjs - Patched by Root

Root has patched CVE-2026-54269 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-41242 CVE-2026-41242 in protobufjs - Patched by Root

Root has patched CVE-2026-41242 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-25878 CVE-2022-25878 in protobufjs - Patched by Root

Root has patched CVE-2022-25878 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-36665 CVE-2023-36665 in protobufjs - Patched by Root

Root has patched CVE-2023-36665 in the protobufjs package for Root:npm. Multiple fixed versions available...

Security Bulletin: Manage Component uses protobufjs-8.0.1.tgz and utf8-1.1.0.tgz in map-component app which is vulnerable to CVE-2026-44288, CVE-2026-44289, CVE-2026-44290, CVE-2026-44291, CVE-2026-44292, CVE-2026-44293 and CVE-2026-44294

Summary Manage Component uses protobufjs-8.0.1.tgz and utf8-1.1.0.tgz in map-component app which is vulnerable to CVE-2026-44288, CVE-2026-44289, CVE-2026-44290, CVE-2026-44291, CVE-2026-44292, CVE-2026-44293 and CVE-2026-44294. This security bulletin provides details about the vulnerability and...

Security Bulletin: Vulnerability in protobufjs affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in protobufjs has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...

protobufjs: protobufjs: Denial of Service via crafted JSON descriptors

A flaw was found in protobufjs. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a crafted JSON descriptor with deeply nested namespace definitions. This can lead to the exhaustion of the JavaScript call stack during descriptor loading, making the...