An open index of dependabot pull requests across open source projects.

protobufjs

Ecosystem:
npm
Package URL:
pkg:npm/protobufjs
Total PRs:
2,103 Dependabot PRs
Latest PR:
about 18 hours ago
Unique Repositories:
1,537 repositories
Unique Repos (30 days):
206 repositories
Security Advisories
protobufjs: Denial of service through unbounded Any expansion during JSON conversion
GHSA-wcpc-wj8m-hjx6 CVE-2026-48712 HIGH published 3 days ago • updated 1 day ago
## Summary protobufjs could recurse without a depth limit while converting decoded messages to plain objects or JSON. This affected generated `toO...
protobufjs : Schema-derived names can shadow runtime-significant properties
GHSA-f38q-mgvj-vph7 CVE-2026-54269 MODERATE published 3 days ago • updated 1 day ago
## Summary protobufjs accepted certain schema-derived names that could collide with properties used by protobufjs runtime helpers. The known affec...
protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion
GHSA-jggg-4jg4-v7c6 CVE-2026-45740 MODERATE published about 1 month ago • updated 1 day ago
## Summary protobufjs could recurse without a depth limit while expanding nested JSON descriptors through `Root.fromJSON()` and `Namespace.addJSON...
protobuf.js: Code injection through bytes field defaults in generated toObject code
GHSA-66ff-xgx4-vchm CVE-2026-44293 HIGH published about 1 month ago • updated 1 day ago
## Summary protobufjs generated JavaScript for `toObject` conversion could include an unsafe expression derived from a schema-controlled `bytes` f...
protobuf.js: Prototype injection in generated message constructors
GHSA-fx83-v9x8-x52w CVE-2026-44292 MODERATE published about 1 month ago • updated 1 day ago
## Summary protobufjs generated message constructors copied enumerable properties from a provided properties object without filtering the `__proto...
Recent PRs (filtered by: Patch PRs )
Package Details
Name: protobufjs
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/protobufjs
JSON API: View JSON
Security Advisories

15

Active advisories
CRITICAL 2
HIGH 6
MODERATE 7
View All npm Advisories
Package Information
Description:

Protocol Buffers for JavaScript (& TypeScript).

Repository: https://github.com/protobufjs/protobuf.js
Homepage: https://protobufjs.github.io/protobuf.js/
Latest Release: 7.5.3
about 1 year ago
Dependent Repos: 377,915
Dependent Packages: 3,418
Downloads: 101,490,294
Ranking: Top 0.0581% by dependent repos Top 0.0256% by downloads Top 0.0247% by dependent pkgs
PR Status
Open 936 (44.5%)
Merged 96 (4.6%)
Closed 991 (47.1%)
PR Types
Major 139 (6.6%)
Minor 737 (35.1%)
Patch 1,140 (54.2%)
Removal 4 (0.2%)