github_osv/GHSA-762f-c2wg-m8c8
Denial of Service in protobufjs
Versions of `protobufjs` before 5.0.3 and 6.8.6 are vulnerable to a regular expression denial of service when parsing crafted invalid *.proto files.
## Recommendation
Update to version 5.0.3, 6.8.6 or later.
gitlab/npm/protobufjs/CVE-2018-3738
Incorrect Regular Expression
protobufjs is vulnerable to ReDoS when parsing crafted invalid `.proto` files.