Start for Free
npm

protobufjs-cli

View on npm registry
4 Total advisories
4 Vulnerabilities
0 Malware

Dependency scanning

Check whether protobufjs-cli is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

HIGH 8.2
npm

CVE-2026-54271

protobufjs-cli: Code injection in pbjs static output from crafted JSON descriptor names
MEDIUM 5.3
npm

CVE-2026-54269

protobufjs : Schema-derived names can shadow runtime-significant properties
HIGH 7.8
npm

CVE-2026-42290

protobuf.js is Vulnerable to OS Command Injection in the CLI
HIGH 8.7
npm

CVE-2026-44295

protobuf.js: Code injection in pbjs static output from crafted schema names

Browse more npm advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes