Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2018-3738

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-762f-c2wg-m8c8

Denial of Service in protobufjs Versions of `protobufjs` before 5.0.3 and 6.8.6 are vulnerable to a regular expression denial of service when parsing crafted invalid *.proto files. ## Recommendation Update to version 5.0.3, 6.8.6 or later.

gitlab/npm/protobufjs/CVE-2018-3738

Incorrect Regular Expression protobufjs is vulnerable to ReDoS when parsing crafted invalid `.proto` files.