Skip to content
Threat Feed

Tag

CVE-2026-44289

1 brief RSS
high advisory

protobuf.js Denial-of-Service Vulnerability via Unbounded Recursion (CVE-2026-44289)

protobuf.js is vulnerable to a denial-of-service (DoS) attack (CVE-2026-44289) due to unbounded recursion while decoding nested protobuf data, potentially leading to stack exhaustion and process crashes when processing crafted protobuf binary payloads.

protobufjs +1 denial of service CVE-2026-44289
2r 1t