protobufjs vulnerabilities and fixes

Recent CVEs affecting protobufjs, with upgrade or downgrade steps. 2 tracked.

protobufjs has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-07-08. Highest priority: CVE-2026-59877 (score 31/100).

• CVE-2026-59877 MEDIUM 5.3 UPGRADE protobufjs compiles protobuf definitions into JavaScript (JS) functions
• CVE-2026-59876 MEDIUM 4.8 UPGRADE protobufjs compiles protobuf definitions into JavaScript (JS) functions

FAQ

How do I fix protobufjs vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is protobufjs being exploited right now?

None of the tracked protobufjs CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which protobufjs CVE should I patch first?

CVE-2026-59877 currently ranks highest (31/100): protobufjs compiles protobuf definitions into JavaScript (JS) functions.

← Back to latest CVEs