An open index of dependabot pull requests across open source projects.

protobufjs

Ecosystem:
npm
Package URL:
pkg:npm/protobufjs
Total PRs:
2,135 Dependabot PRs
Latest PR:
9 days ago
Unique Repositories:
1,558 repositories
Unique Repos (30 days):
8 repositories
Security Advisories
protobuf.js: Code generation gadget after prototype pollution
GHSA-75px-5xx7-5xc7 CVE-2026-44291 HIGH published 3 months ago • updated 3 days ago
## Summary protobufjs used plain objects with inherited prototypes for internal type lookup tables used by generated encode and decode functions. ...
protobufjs: Memory amplification from preserved unknown fields in binary decode
GHSA-94rc-8x27-4472 CVE-2026-54270 MODERATE published about 1 month ago • updated 4 days ago
## Summary protobufjs 8.2.0 added support for preserving unknown fields encountered during binary decode. Affected versions preserved unknown wire...
protobufjs : Schema-derived names can shadow runtime-significant properties
GHSA-f38q-mgvj-vph7 CVE-2026-54269 MODERATE published about 1 month ago • updated 4 days ago
## Summary protobufjs accepted certain schema-derived names that could collide with properties used by protobufjs runtime helpers. The known affec...
protobufjs: Denial of Service via infinite loop in .proto option parsing
GHSA-j3f2-48v5-ccww CVE-2026-59877 MODERATE published 10 days ago • updated 8 days ago
## Summary protobufjs parsed option names by advancing through schema tokens until it reached an `=` token, without checking for end of input. A c...
protobuf.js: Code injection through bytes field defaults in generated toObject code
GHSA-66ff-xgx4-vchm CVE-2026-44293 HIGH published 3 months ago • updated 6 days ago
## Summary protobufjs generated JavaScript for `toObject` conversion could include an unsafe expression derived from a schema-controlled `bytes` f...
Recent PRs
Bump protobufjs from 7.5.6 to 7.6.4

internxt/meet-web #256

7.5.6 → 7.6.4 Minor PR
Open about 1 month ago 2 comments
internxt
Package Details
Name: protobufjs
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/protobufjs
JSON API: View JSON
Security Advisories

17

Active advisories
CRITICAL 2
HIGH 6
MODERATE 9
View All npm Advisories
Package Information
Description:

Protocol Buffers for JavaScript (& TypeScript).

Repository: https://github.com/protobufjs/protobuf.js
Homepage: https://protobufjs.github.io/protobuf.js/
Latest Release: 7.5.3
about 1 year ago
Dependent Repos: 377,915
Dependent Packages: 3,418
Downloads: 101,490,294
Ranking: Top 0.0581% by dependent repos Top 0.0256% by downloads Top 0.0247% by dependent pkgs
PR Status
Open 955 (44.7%)
Merged 96 (4.5%)
Closed 1,005 (47.1%)
PR Types
Major 140 (6.6%)
Minor 759 (35.6%)
Patch 1,150 (53.9%)
Removal 4 (0.2%)