{"action":"Upgrade protobufjs to 7.5.5 or later.","affected":[{"fixed":"8.0.1","introduced":"8.0.0"},{"fixed":"7.5.5","introduced":"0"}],"component":"protobufjs","cve_ids":["CVE-2026-41242"],"ecosystem":"npm","epss":0.00774,"exploited":false,"fixed_versions":["8.0.1","7.5.5"],"ghsa_id":"GHSA-xq3m-2v4x-88gg","id":"tcs_01M5KGJHXVKBJQ0VXV87PTQP9W","modified_at":"2026-09-10T03:50:44.893315741Z","published_at":"2026-04-16T22:34:57Z","references":["https://osv.dev/vulnerability/GHSA-xq3m-2v4x-88gg","https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-xq3m-2v4x-88gg","https://nvd.nist.gov/vuln/detail/CVE-2026-41242","https://github.com/protobufjs/protobuf.js/commit/535df444ac060243722ac5d672db205e5c531d75","https://github.com/protobufjs/protobuf.js/commit/ff7b2afef8754837cc6dc64c864cd111ab477956","https://github.com/protobufjs/protobuf.js","https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v7.5.5","https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v8.0.1"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-xq3m-2v4x-88gg","url":"https://osv.dev/vulnerability/GHSA-xq3m-2v4x-88gg"}],"summary":"Arbitrary code execution in protobufjs"}