PP
Vendor security profile
protobufjs project
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical1
CISA KEV0
Public exploit1
Patch rate%60
Avg. CVSS7.4
12-month vulnerability rate
0
0
0
0
0
1
2
0
2
0
0
0
CVE KEV
CVE severity distribution
5toplam CVE
Critical1 (20%)
High3 (60%)
Medium1 (20%)
Patch and exploitation view
%60
Verified patch
%0
CISA KEV
%20
Public exploit
3Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
7.5
4.8
7.7
CVE-2026-44293protobufjs: Code injection through bytes field defaults in generated toObject code
Patch status unknownEPSS %1
7.5
CVE-2026-44289protobufjs: Denial of service through unbounded protobuf recursion
Patch status unknownEPSS %1
9.4
CVE-2026-41242protobufjs has an arbitrary code execution issue
Patch verifiedEPSS %1