CVE-2026-54269 | protobufjs protobuf.js up to 7.6.2/8.5.x Type recursion (GHSA-f38q-mgvj-vph7)

June 22, 2026 Yanac

A vulnerability marked as problematic has been reported in protobufjs protobuf.js up to 7.6.2/8.5.x. The impacted element is an unknown function. This manipulation of the argument Type causes uncontrolled recursion.

This vulnerability is registered as CVE-2026-54269. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More