Description
protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.
Remediation
References
https://hackerone.com/reports/319576
Related Vulnerabilities
CVE-2022-25758 Vulnerability in maven package org.webjars.npm:scss-tokenizer
CVE-2021-39157 Vulnerability in npm package detect-character-encoding
CVE-2021-23363 Vulnerability in npm package kill-by-port
CVE-2020-7729 Vulnerability in maven package org.webjars.npm:grunt
CVE-2017-5638 Vulnerability in maven package org.apache.struts:struts2-core