protobufjs project kayıtları
protobufjs project üreticisine ait 20 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')5
- CWE-94 Improper Control of Generation of Code ('Code Injection')5
- CWE-674 Uncontrolled Recursion4
- CWE-770 Allocation of Resources Without Limits or Throttling2
- CWE-20 Improper Input Validation1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
20 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2023-36665İstismar yok | "protobuf.js (aka protobufjs) 6.10.0 through 7.x before 7.2.5 allows Prototype Pollution, a different vulnerability than CVE-2022-25878.protobufjs project · protobufjs · CWE-1321 | Kritik9,8 | — | %1,6 | 5 Tem 2023 |
37İzleyin | CVE-2026-41242Kavram kanıtı | protobufjs has an arbitrary code execution issueprotobufjs project · protobufjs · CWE-94 | Kritik9,4 | — | %0,7 | 18 Nis 2026 |
34İzleyin | CVE-2026-44295İstismar yok | protobufjs-cli: Code injection in pbjs static output from crafted schema namesprotobufjs project · protobufjs-cli · CWE-94 | Yüksek8,7 | — | %0,3 | 13 May 2026 |
32İzleyin | CVE-2026-44291İstismar yok | protobufjs: Code generation gadget after prototype pollutionprotobufjs project · protobufjs · CWE-94 | Yüksek8,1 | — | %0,5 | 13 May 2026 |
32İzleyin | CVE-2026-54271İstismar yok | protobufjs-cli: Code injection in pbjs static output from crafted JSON descriptor namesprotobufjs project · protobufjs-cli · CWE-94 | Yüksek8,2 | — | %0,3 | 22 Haz 2026 |
31İzleyin | CVE-2022-25878İstismar yok | The package protobufjs before 6.11.3 are vulnerable to Prototype Pollution which can allow an attacker to add/modify properties of the Objecprotobufjs project · protobufjs · CWE-1321 | Yüksek7,5 | — | %2,3 | 27 May 2022 |
31İzleyin | CVE-2026-42290İstismar yok | protobufjs-cli: OS Command Injectionprotobufjs project · protobufjs-cli · CWE-78 | Yüksek7,8 | — | %0,1 | 13 May 2026 |
30İzleyin | CVE-2026-44289İstismar yok | protobufjs: Denial of service through unbounded protobuf recursionprotobufjs project · protobufjs · CWE-674 | Yüksek7,5 | — | %0,6 | 13 May 2026 |
30İzleyin | CVE-2026-48712İstismar yok | protobufjs: Denial of service through unbounded Any expansion during JSON conversionprotobufjs project · protobufjs · CWE-674 | Yüksek7,5 | — | %0,4 | 22 Haz 2026 |
30İzleyin | CVE-2026-44293İstismar yok | protobufjs: Code injection through bytes field defaults in generated toObject codeprotobufjs project · protobufjs · CWE-94 | Yüksek7,7 | — | %0,4 | 13 May 2026 |
30İzleyin | CVE-2026-44290İstismar yok | protobufjs: Process-wide denial of service through unsafe option pathsprotobufjs project · protobufjs · CWE-1321 | Yüksek7,5 | — | %0,3 | 13 May 2026 |
30İzleyin | CVE-2026-59877İstismar yok | protobufjs: Denial of Service via infinite loop in .proto option parsingprotobufjs project · protobufjs · CWE-835 | Yüksek7,5 | — | %0,3 | 8 Tem 2026 |
30İzleyin | CVE-2026-45740İstismar yok | protobufjs: Denial of Service via unbounded recursive JSON descriptor expansionprotobufjs project · protobufjs · CWE-674 | Yüksek7,5 | — | %0,2 | 13 May 2026 |
22İzleyin | CVE-2018-3738İstismar yok | protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.protobufjs project · protobufjs · CWE-770 | Orta5,5 | — | %0,9 | 6 Haz 2018 |
21İzleyin | CVE-2026-44294İstismar yok | protobufjs: Denial of service from crafted field names in generated codeprotobufjs project · protobufjs · CWE-20 | Orta5,3 | — | %0,4 | 13 May 2026 |
21İzleyin | CVE-2026-54269İstismar yok | protobufjs: Schema-derived names can shadow runtime-significant propertiesprotobufjs project · protobufjs · CWE-674 | Orta5,3 | — | %0,4 | 22 Haz 2026 |
21İzleyin | CVE-2026-54270İstismar yok | protobufjs: Memory amplification from preserved unknown fields in binary decodeprotobufjs project · protobufjs · CWE-770 | Orta5,3 | — | %0,4 | 22 Haz 2026 |
21İzleyin | CVE-2026-44288İstismar yok | protobufjs: Overlong UTF-8 decodingprotobufjs project · protobufjs · CWE-176 | Orta5,3 | — | %0,3 | 13 May 2026 |
21İzleyin | CVE-2026-44292İstismar yok | protobufjs: Prototype injection in generated message constructorsprotobufjs project · protobufjs · CWE-1321 | Orta5,3 | — | %0,2 | 13 May 2026 |
19İzleyin | CVE-2026-59876İstismar yok | protobufjs: Text Format string map parsing can mutate returned map object prototypeprotobufjs project · protobufjs · CWE-1321 | Orta4,8 | — | %0,3 | 8 Tem 2026 |
- CVE-2023-3666540Planlayın
"protobuf.js (aka protobufjs) 6.10.0 through 7.x before 7.2.5 allows Prototype Pollution, a different vulnerability than CVE-2022-25878.
KritikCVSS 9,8İstismar yokEPSS %1protobufjs project · protobufjs5 Tem 2023
- CVE-2026-4124237İzleyin
protobufjs has an arbitrary code execution issue
KritikCVSS 9,4Kavram kanıtıEPSS %0protobufjs project · protobufjs18 Nis 2026
- CVE-2026-4429534İzleyin
protobufjs-cli: Code injection in pbjs static output from crafted schema names
YüksekCVSS 8,7İstismar yokEPSS %0protobufjs project · protobufjs-cli13 May 2026
- CVE-2026-4429132İzleyin
protobufjs: Code generation gadget after prototype pollution
YüksekCVSS 8,1İstismar yokEPSS %0protobufjs project · protobufjs13 May 2026
- CVE-2026-5427132İzleyin
protobufjs-cli: Code injection in pbjs static output from crafted JSON descriptor names
YüksekCVSS 8,2İstismar yokEPSS %0protobufjs project · protobufjs-cli22 Haz 2026
- CVE-2022-2587831İzleyin
The package protobufjs before 6.11.3 are vulnerable to Prototype Pollution which can allow an attacker to add/modify properties of the Objec
YüksekCVSS 7,5İstismar yokEPSS %2protobufjs project · protobufjs27 May 2022
- CVE-2026-4229031İzleyin
protobufjs-cli: OS Command Injection
YüksekCVSS 7,8İstismar yokEPSS %0protobufjs project · protobufjs-cli13 May 2026
- CVE-2026-4428930İzleyin
protobufjs: Denial of service through unbounded protobuf recursion
YüksekCVSS 7,5İstismar yokEPSS %0protobufjs project · protobufjs13 May 2026
- CVE-2026-4871230İzleyin
protobufjs: Denial of service through unbounded Any expansion during JSON conversion
YüksekCVSS 7,5İstismar yokEPSS %0protobufjs project · protobufjs22 Haz 2026
- CVE-2026-4429330İzleyin
protobufjs: Code injection through bytes field defaults in generated toObject code
YüksekCVSS 7,7İstismar yokEPSS %0protobufjs project · protobufjs13 May 2026
- CVE-2026-4429030İzleyin
protobufjs: Process-wide denial of service through unsafe option paths
YüksekCVSS 7,5İstismar yokEPSS %0protobufjs project · protobufjs13 May 2026
- CVE-2026-5987730İzleyin
protobufjs: Denial of Service via infinite loop in .proto option parsing
YüksekCVSS 7,5İstismar yokEPSS %0protobufjs project · protobufjs8 Tem 2026
- CVE-2026-4574030İzleyin
protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion
YüksekCVSS 7,5İstismar yokEPSS %0protobufjs project · protobufjs13 May 2026
- CVE-2018-373822İzleyin
protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.
OrtaCVSS 5,5İstismar yokEPSS %0protobufjs project · protobufjs6 Haz 2018
- CVE-2026-4429421İzleyin
protobufjs: Denial of service from crafted field names in generated code
OrtaCVSS 5,3İstismar yokEPSS %0protobufjs project · protobufjs13 May 2026
- CVE-2026-5426921İzleyin
protobufjs: Schema-derived names can shadow runtime-significant properties
OrtaCVSS 5,3İstismar yokEPSS %0protobufjs project · protobufjs22 Haz 2026
- CVE-2026-5427021İzleyin
protobufjs: Memory amplification from preserved unknown fields in binary decode
OrtaCVSS 5,3İstismar yokEPSS %0protobufjs project · protobufjs22 Haz 2026
- CVE-2026-4428821İzleyin
protobufjs: Overlong UTF-8 decoding
OrtaCVSS 5,3İstismar yokEPSS %0protobufjs project · protobufjs13 May 2026
- CVE-2026-4429221İzleyin
protobufjs: Prototype injection in generated message constructors
OrtaCVSS 5,3İstismar yokEPSS %0protobufjs project · protobufjs13 May 2026
- CVE-2026-5987619İzleyin
protobufjs: Text Format string map parsing can mutate returned map object prototype
OrtaCVSS 4,8İstismar yokEPSS %0protobufjs project · protobufjs8 Tem 2026