Skip to content
COOEY

FAIL › dossier

protobufjs project

VENDOR

Failure events
1
Zero-days
1
RCEs
1
On KEV
0
Critical
1
Worst shame
50
Dossier not yet built — the RAG curator builds one for players with ≥2 failure events. The failure history and sentiment below are live.
FAILURE HISTORY · 1
DATEEVENTSEVSUMMARY
2026-04-18 CVE-2026-41242 critical protobufjs compiles protobuf definitions into JavaScript (JS) functions. In versions prior to 8.0.1 and 7.5.5, attackers can inject arbitrary code in the "type" fields of protobuf definitions, which will then execute during object decoding using that definition. Versions 8.0.1 an