Skip to content
OpenAdvisories

Product · protobufjs

protobufjs-cli

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-54271

    protobufjs-cli: Code injection in pbjs static output from crafted JSON descriptor names

    protobufjs-cli is the command line add-on for protobuf.js. Prior to 1.3.2 and 2.5.0, a previous fix for unsafe name handling in pbjs static / static-module code generation was incomplete. Affected versions of protobufjs-cli could still emit unsafe JavaScript …

    protobufjs protobufjs-cli protobufjs-cli npm