CVE-2018-3738CWE-770

protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files

published June 7, 2018

CVSS
—
EPSS
1%
Percentile
60.4
In the wild
Unconfirmed
What it is

protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00943 · 60.4th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2018-06-07T02:00Z
EPSS history
Timeline
  • 07 JUN 02:00Z
    protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files
    cvelistv5