Description
protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.
Remediation
References
https://hackerone.com/reports/319576
Related Vulnerabilities
CVE-2023-28155 Vulnerability in maven package org.webjars.bower:request
CVE-2021-42010 Vulnerability in maven package org.apache.heron:heron-api
CVE-2023-3163 Vulnerability in maven package com.ruoyi:ruoyi-common
CVE-2017-16144 Vulnerability in npm package myserver.alexcthomas18
CVE-2022-44730 Vulnerability in maven package org.apache.xmlgraphics:batik-script