{"action":"Upgrade protobufjs to 6.11.4 or later.","affected":[{"fixed":"7.2.5","introduced":"7.0.0"},{"fixed":"6.11.4","introduced":"6.10.0"}],"component":"protobufjs","cve_ids":["CVE-2023-36665"],"ecosystem":"npm","epss":0.01697,"exploited":false,"fixed_versions":["7.2.5","6.11.4"],"ghsa_id":"GHSA-h755-8qp9-cq85","id":"tcs_01M5KFTEB59P4ERA86ZRVWSCDP","modified_at":"2026-08-07T08:12:13.849928168Z","published_at":"2023-07-05T15:30:24Z","references":["https://osv.dev/vulnerability/GHSA-h755-8qp9-cq85","https://nvd.nist.gov/vuln/detail/CVE-2023-36665","https://github.com/protobufjs/protobuf.js/issues/1918#issuecomment-1723500294","https://github.com/protobufjs/protobuf.js/pull/1899","https://github.com/protobufjs/protobuf.js/commit/e66379f451b0393c27d87b37fa7d271619e16b0d","https://github.com/protobufjs/protobuf.js","https://github.com/protobufjs/protobuf.js/commits/release-6.11.4","https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.2.3...protobufjs-v7.2.4","https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v7.2.4","https://security.netapp.com/advisory/ntap-20240628-0006","https://www.code-intelligence.com/blog/cve-protobufjs-prototype-pollution-cve-2023-36665"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-h755-8qp9-cq85","url":"https://osv.dev/vulnerability/GHSA-h755-8qp9-cq85"}],"summary":"protobufjs Prototype Pollution vulnerability"}