protobuf-javascript (aka google-protobuf npm package)

1 result · Clear filters · Feed

• High 8.7
  CVE-2026-89418

  Uncontrolled Recursion leading to Denial of Service in protobuf-javascript (google-protobuf)

  google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small crafted payload of deeply nested START_GROUP wire bytes to any Node.js service that calls the generated deserializeBinary() API, causing a…

  Google protobuf-javascript (aka google-protobuf npm package) python-tensorboard Azure Linux
  Sep 17, 2026