protobufjs-cli vulnerabilities
CVEs whose affected-version data names the protobufjs-cli package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-54269Medium· 5.3protobufjs : Schema-derived names can shadow runtime-significant properties
protobufjs : Schema-derived names can shadow runtime-significant properties
▾ Sunlitprotobufjs · protobufjsEPSS 0.40%via GHSA
CVE-2026-54271High· 8.2protobufjs-cli: Code injection in pbjs static output from crafted JSON descriptor names
protobufjs-cli: Code injection in pbjs static output from crafted JSON descriptor names
▾ Twilightprotobufjs-cli · protobufjs-cliEPSS 0.30%via GHSA