Protobufjs-cli vulnerabilities

2 known vulnerabilities in Protobufjs-cli from Protobufjs Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  protobuf.js: Improper Control of Generation of Code

  CVE-2026-44295May 13, 2026Protobufjs

  protobufjs-cli is the command line add-on for protobuf.js. Prior to 1.2.1 and 2.0.2, pbjs static code generation could emit unsafe JavaScript identifiers derived from schema-controlled names. When generating static JavaScript from a crafted schema or JSON desc

• 7.8 High severity

  protobuf.js: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-42290May 13, 2026Protobufjs

  protobufjs-cli is the command line add-on for protobuf.js. Prior to 1.2.1 and 2.0.2, pbts invoked JSDoc by building a shell command string from input file paths and executing it through child_process.exec. File paths containing shell metacharacters could there