Description
protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.
Remediation
References
https://hackerone.com/reports/319576
Related Vulnerabilities
CVE-2021-31412 Vulnerability in maven package com.vaadin:flow-server
CVE-2020-10727 Vulnerability in maven package org.apache.activemq:artemis-core-client
CVE-2023-24789 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-parent
CVE-2019-12409 Vulnerability in maven package org.apache.solr:solr-core
CVE-2023-49376 Vulnerability in maven package com.jfinal:jfinal