Description
protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.
Remediation
References
https://hackerone.com/reports/319576
Related Vulnerabilities
CVE-2022-31069 Vulnerability in npm package @finastra/nestjs-proxy
CVE-2020-28282 Vulnerability in npm package getobject
CVE-2022-39353 Vulnerability in npm package xmldom
CVE-2023-29215 Vulnerability in maven package org.apache.linkis:linkis-metadata-query-service-jdbc
CVE-2013-2035 Vulnerability in maven package org.fusesource.hawtjni:hawtjni-runtime