Skip to content
OpenAdvisories

Package · npm

@protobufjs/utf8

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.3
    CVE-2026-44288

    protobufjs: Overlong UTF-8 decoding

    protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs includes a minimal UTF-8 decoder that accepted overlong UTF-8 byte sequences and decoded them to their canonical characters instead of replacing them…

    protobufjs protobuf.js renovate kubeflow-centraldashboard Wolfi npm