protobufjs project protobufjs-cli vulnerabilities (CVE)

CVE records published for protobufjs project protobufjs-cli, newest first. Follow to get an email when a new one appears.

4 results
7.8High
CVE-2026-42290

protobufjs-cli: OS Command Injection

protobufjs protobuf.js

protobufjs-cli is the command line add-on for protobuf.js. Prior to 1.2.1 and 2.0.2, pbts invoked JSDoc by building a shell command string from input file paths and executing it through child_process.exec. File paths containing shell metacharacters could ther…