Description

protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.

Remediation

References

https://hackerone.com/reports/319576

Related Vulnerabilities

CVE-2021-23395 Vulnerability in npm package nedb

CVE-2020-7719 Vulnerability in npm package locutus

CVE-2022-37258 Vulnerability in npm package steal

CVE-2019-5413 Vulnerability in maven package org.webjars.npm:morgan

CVE-2022-31160 Vulnerability in npm package jquery-ui

Severity

Medium

Classification

CWE-185 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Tags

Exploit Third Party Advisory