Teire
Changes
Scan
Docs
Trust
← All changes
protobufjs (npm) · Teire
Changes
Scan
Docs
Trust
Sign in
Worker running
protobufjs
npm
latest
8.8.1
· 2026-10-11
www.npmjs.com · all 221 versions
Security advisories
11
protobufjs: protobuf.js: Denial of service from crafted field names in generated code
fixed in 7.5.6, 8.0.2
protobufjs: protobuf.js: Code injection through bytes field defaults in generated toObject code
fixed in 7.5.6, 8.0.2
protobufjs: protobuf.js: Denial of service through unbounded protobuf recursion
fixed in 7.5.6, 8.0.2
protobufjs: protobuf.js: Code generation gadget after prototype pollution
fixed in 7.5.6, 8.0.2
protobufjs: protobufjs : Schema-derived names can shadow runtime-significant properties
fixed in 7.6.3, 8.6.0
Versions that change something
7.5.5
2026-04
fixes 1 advisory
7.5.6
2026-04
fixes 7 advisories
7.5.8
2026-05
fixes 1 advisory
7.6.1
2026-05
fixes 1 advisory
protobufjs: protobuf.js: Prototype injection in generated message constructors
fixed in 7.5.6, 8.0.2
protobufjs: protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion
fixed in 7.5.8, 8.2.0
protobufjs: protobuf.js: Process-wide denial of service through unsafe option paths
fixed in 7.5.6, 8.0.2
protobufjs: protobufjs has overlong UTF-8 decoding
fixed in 7.5.6, 8.0.2
protobufjs: protobufjs: Denial of service through unbounded Any expansion during JSON conversion
fixed in 7.6.1, 8.4.1
protobufjs: Arbitrary code execution in protobufjs
fixed in 8.0.1, 7.5.5
7.6.3
2026-06
fixes 1 advisory
8.0.1
2026-04
fixes 1 advisory
8.0.2
2026-04
fixes 7 advisories
8.2.0
2026-05
fixes 1 advisory
8.4.1
2026-05
fixes 1 advisory
8.6.0
2026-06
fixes 1 advisory