CVE-2018-3738

protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.

protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.

Versions of `protobufjs` before 5.0.3 and 6.8.6 are vulnerable to a regular expression denial of service when parsing crafted invalid *.proto files. ## Recommendation Update to version 5.0.3, 6.8.6 or later.

Versions of `protobufjs` before 5.0.3 and 6.8.6 are vulnerable to a regular expression denial of service when parsing crafted invalid *.proto files. ## Recommendation Update to version 5.0.3, 6.8.6 or later.

protobufjs es vulnerable a una denegación de servicio con expresiones regulares (ReDoS) cuando se parsean archivos .proto manipulados no válidos.