Known vulnerabilities in protobuf-javascript (aka google-protobuf npm package)
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-89418 | google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields | 8.7 High | Sep 17, 2026 |