Description
protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.
Remediation
References
https://hackerone.com/reports/319576
Related Vulnerabilities
CVE-2019-5448 Vulnerability in npm package yarn
CVE-2021-44906 Vulnerability in maven package org.webjars.bowergithub.substack:minimist
CVE-2022-30973 Vulnerability in maven package org.apache.tika:tika
CVE-2020-7793 Vulnerability in npm package ua-parser-js
CVE-2022-25857 Vulnerability in maven package org.yaml:snakeyaml