https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T04:37:59.879949+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-45740 CVE-2026-45740 — protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion 2026-10-05T04:37:59.897704+00:00

Affected: protobufjs protobuf.js

protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.8 and 8.2.0, protobufjs could recurse without a depth limit while expanding nested JSON descriptors through Root.fromJSON() and Namespace.addJSON(). A crafted JSON descriptor with deeply nested namespace definitions could cause the JavaScript call stack to be exhausted during descriptor loading. This vulnerability is fixed in 7.5.8 and 8.2.0.