CVE-2026-48712 | protobufjs protobuf.js up to 7.6.0/8.4.0 toObject recursion (GHSA-wcpc-wj8m-hjx6)

June 22, 2026 Yanac

A vulnerability has been found in protobufjs protobuf.js up to 7.6.0/8.4.0 and classified as problematic. The impacted element is the function toObject. Performing a manipulation results in uncontrolled recursion.

This vulnerability was named CVE-2026-48712. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More