Description
protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.
Remediation
References
https://hackerone.com/reports/319576
Related Vulnerabilities
CVE-2022-41940 Vulnerability in maven package org.webjars.bower:engine.io
CVE-2021-42357 Vulnerability in maven package org.apache.knox:gateway-service-knoxsso
CVE-2021-3503 Vulnerability in maven package org.wildfly:wildfly-metrics
CVE-2023-22621 Vulnerability in npm package @strapi/plugin-users-permissions
CVE-2022-1466 Vulnerability in maven package org.keycloak:keycloak-core