An open index of dependabot pull requests across open source projects.

protobufjs

Ecosystem:
npm
Package URL:
pkg:npm/protobufjs
Total PRs:
2,083 Dependabot PRs
Latest PR:
about 8 hours ago
Unique Repositories:
1,524 repositories
Unique Repos (30 days):
232 repositories
Security Advisories
protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion
GHSA-jggg-4jg4-v7c6 CVE-2026-45740 MODERATE published 26 days ago • updated 3 days ago
## Summary protobufjs could recurse without a depth limit while expanding nested JSON descriptors through `Root.fromJSON()` and `Namespace.addJSON...
Arbitrary code execution in protobufjs
GHSA-xq3m-2v4x-88gg CVE-2026-41242 CRITICAL published about 2 months ago • updated 2 days ago
## Summary protobufjs could execute generated JavaScript code derived from protobuf schema metadata. When loading a crafted JSON descriptor, schem...
protobuf.js: Prototype injection in generated message constructors
GHSA-fx83-v9x8-x52w CVE-2026-44292 MODERATE published about 1 month ago • updated 2 days ago
## Summary protobufjs generated message constructors copied enumerable properties from a provided properties object without filtering the `__proto...
protobuf.js: Denial of service through unbounded protobuf recursion
GHSA-685m-2w69-288q CVE-2026-44289 HIGH published about 1 month ago • updated 2 days ago
## Summary protobufjs could recurse without a depth limit while decoding nested protobuf data. This affected both skipping unknown group fields an...
protobufjs has overlong UTF-8 decoding
GHSA-q6x5-8v7m-xcrf CVE-2026-44288 MODERATE published about 1 month ago • updated 2 days ago
## Summary protobufjs includes a minimal UTF-8 decoder used in non-Node and fallback decoding paths. The affected decoder accepted overlong UTF-8 ...
Recent PRs
Package Details
Name: protobufjs
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/protobufjs
JSON API: View JSON
Security Advisories

12

Active advisories
CRITICAL 2
HIGH 5
MODERATE 5
View All npm Advisories
Package Information
Description:

Protocol Buffers for JavaScript (& TypeScript).

Repository: https://github.com/protobufjs/protobuf.js
Homepage: https://protobufjs.github.io/protobuf.js/
Latest Release: 7.5.3
about 1 year ago
Dependent Repos: 377,915
Dependent Packages: 3,418
Downloads: 101,490,294
Ranking: Top 0.0581% by dependent repos Top 0.0256% by downloads Top 0.0247% by dependent pkgs
PR Status
Open 927 (44.6%)
Merged 96 (4.6%)
Closed 977 (47.0%)
PR Types
Major 139 (6.7%)
Minor 718 (34.5%)
Patch 1,136 (54.6%)
Removal 4 (0.2%)