CVE-2018-3738
CVE-2018-3738
This page contains facts from public vulnerability sources. Check the original advisory before updating.
protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.
CVSS 5.5 · Medium · EPSS 0.9% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
protobufjs node module
- Versions
- Versions up to and including 6.8.5: Affected
No fix published
protobufjs npm
- Affected ranges
- SEMVER: ≥ 6.0.0, < 6.8.6
Update to 6.8.6
protobufjs npm
- Affected ranges
- SEMVER: < 5.0.3
Update to 5.0.3