CVE-2018-3738: Protobufjs Project Protobufjs

Medium severity, CVSS 5.5. EPSS: 1% chance of exploitation in the next 30 days.

protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.

Affected products

• Protobufjs Project Protobufjs: up to and including 6.8.5

Published 2018-06-07. Last modified 2026-06-17.