Description
protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.
Remediation
References
https://hackerone.com/reports/319576
Related Vulnerabilities
CVE-2020-7760 Vulnerability in maven package org.webjars.bower:codemirror
CVE-2023-25345 Vulnerability in maven package org.webjars.npm:swig
CVE-2021-23343 Vulnerability in npm package path-parse
CVE-2018-1000863 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2019-20149 Vulnerability in maven package org.webjars.bowergithub.jonschlinkert:kind-of