Vulnerabilities

TI-2026-39169 CVE-2026-54269 · GHSA-f38q-mgvj-vph7

protobufjs: Schema-derived names can shadow runtime-significant properties

LOW 30

protobufjs compiles protobuf definitions into JavaScript (JS) functions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00402 Published 2026-06-22 Partial fix · 7.6.3, 8.6.0 +2 CWE-674

TI-2026-39171 CVE-2026-54271 · GHSA-pr59-h9ph-3fr8

LOW 37

protobufjs-cli is the command line add-on for protobuf.js.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00303 Published 2026-06-22 Fixed in 1.3.2, 2.4.2 +1 CWE-94

TI-2026-32266 CVE-2026-44295 · GHSA-6r35-46g8-jcw9

MEDIUM 40

protobufjs-cli is the command line add-on for protobuf.js.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00395 Published 2026-05-13 Fixed in 2.0.2, 1.2.1 CWE-94

TI-2026-30601 CVE-2026-42290 · GHSA-f84p-cvgm-xgjj

LOW 35

protobufjs-cli is the command line add-on for protobuf.js.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00132 Published 2026-05-13 Fixed in 2.0.2, 1.2.1 CWE-78