Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2026-59877
Undergoing Analysis
More InfoOfficial Page
Source-security-advisories@github.com
View Known Exploited Vulnerability (KEV) details
Published At-08 Jul, 2026 | 16:16
Updated At-10 Jul, 2026 | 18:01

protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.5 and 8.6.6, protobufjs parsed option names by advancing through schema tokens until reaching an = token without checking for end of input, so a crafted .proto schema that opens an option declaration and ends prematurely can cause parse, Root.load, or Root.loadSync to loop indefinitely. This issue is fixed in versions 7.6.5 and 8.6.6.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.15.3MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
N/A
Type: Secondary
Version: 3.1
Base score: 5.3
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Type: N/A
Version:
Base score:
Base severity: N/A
Vector:
CPE Matches

Weaknesses
CWE IDTypeSource
CWE-835Secondarysecurity-advisories@github.com
CWE ID: CWE-835
Type: Secondary
Source: security-advisories@github.com
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://github.com/protobufjs/protobuf.js/commit/10fba6d54815ceecca8a06b9a6db490c8f5d2217security-advisories@github.com
N/A
https://github.com/protobufjs/protobuf.js/commit/fa5c73add738ceb471e74da8cc2f3727c3d0a69fsecurity-advisories@github.com
N/A
https://github.com/protobufjs/protobuf.js/pull/2352security-advisories@github.com
N/A
https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v7.6.5security-advisories@github.com
N/A
https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v8.6.6security-advisories@github.com
N/A
https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-j3f2-48v5-ccwwsecurity-advisories@github.com
N/A
Hyperlink: https://github.com/protobufjs/protobuf.js/commit/10fba6d54815ceecca8a06b9a6db490c8f5d2217
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://github.com/protobufjs/protobuf.js/commit/fa5c73add738ceb471e74da8cc2f3727c3d0a69f
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://github.com/protobufjs/protobuf.js/pull/2352
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v7.6.5
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://github.com/protobufjs/protobuf.js/releases/tag/protobufjs-v8.6.6
Source: security-advisories@github.com
Resource: N/A
Hyperlink: https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-j3f2-48v5-ccww
Source: security-advisories@github.com
Resource: N/A
Change History
0Changes found

Details not found