Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Echoskorjjj

#42207of 60,450
7.5Total CVSS
Vulnerabilities · 1
PT-2026-43619
2026-05-27
7.5
CVE-2026-48712
Npm
Protobufjs
An issue exists where the software could recurse without a depth limit during the conversion of decoded messages to plain objects or JSON. This specifically affects the generated `toObject()` conversion and the custom `google.protobuf.Any` JSON conversion path. A crafted protobuf binary payload containing deeply nested `Any` values can exhaust the JavaScript call stack, leading to a process crash or message conversion failure via a stack overflow. This occurs when applications decode untrusted protobuf input containing `google.protobuf.Any` values and subsequently convert them using `JSON.stringify(message)`, `Message#toJSON()`, or `Type.toObject(message, { json: true })`.