Lucene search
+L

2 matches found

OSV
OSV
added 2026/07/08 3:28 p.m.17 views

CVE-2026-59877 protobufjs: Denial of Service via infinite loop in .proto option parsing

protobufjs compiles protobuf definitions into JavaScript JS functions. Prior to 7.6.5 and 8.6.6, protobufjs parsed option names by advancing through schema tokens until reaching an = token without checking for end of input, so a crafted .proto schema that opens an option declaration and ends...

5.3CVSS6.1AI score
SaveExploits0References8
Rows per page
Query Builder