{"source":1119378,"name":"protobufjs","dependency":"protobufjs","title":"protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion","url":"https://github.com/advisories/GHSA-jggg-4jg4-v7c6","severity":"moderate","versions":["0.0.0","0.9.1","0.9.3","0.9.4","0.9.5","0.9.6","0.9.7","0.9.8","0.9.9","0.9.10","0.9.11","0.9.12","0.9.13","0.10.0","0.11.0","0.11.1","0.11.2","0.12.0","0.12.1","0.12.2","0.12.3","0.12.4","0.12.5","0.12.6","0.12.7","0.12.8","0.12.9","0.12.10","0.12.11","0.12.12","0.12.13","1.0.0-b1","1.0.0-b2","1.0.0-b4","1.0.0-b5","1.0.0-b6","1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","1.1.6","1.1.7","1.1.8","1.1.9","1.3.0","1.3.1","1.3.2","1.5.0","1.5.1","2.0.0-rc1","2.0.0-rc2","2.0.0-rc4","2.0.0","2.0.1","2.0.2","2.0.3","2.0.4","2.0.5","2.2.1","3.0.0","3.2.0","3.2.1","3.2.2","3.2.4","3.3.0","3.3.1","3.4.0","3.4.1","3.5.1","3.5.2","3.5.4","3.5.5","3.6.0","3.7.0","3.8.0","3.8.1","3.8.2","4.0.0-b2","4.0.0-b3","4.0.0-b4","4.0.0-b5","4.0.0","4.1.0","4.1.1","4.1.2","4.1.3","5.0.0","5.0.1","5.0.2","5.0.3","6.0.0","6.0.1","6.0.2","6.1.0","6.1.1","6.2.0","6.2.1","6.3.0","6.3.1","6.4.0","6.4.1","6.4.3","6.4.4","6.4.5","6.4.6","6.5.0","6.5.1","6.5.2","6.5.3","6.6.0","6.6.1","6.6.2","6.6.3","6.6.4","6.6.5","6.7.0","6.7.1","6.7.2","6.7.3","6.8.0","6.8.1","6.8.2","6.8.3","6.8.4","6.8.5","6.8.6","6.8.7","6.8.8","6.8.9","6.9.0-beta.0","6.9.0-pre","6.9.0","6.10.0-beta.0","6.10.0-beta.1","6.10.0-beta.2","6.10.0","6.10.1-beta.0","6.10.1","6.10.2","6.10.3","6.11.0-pre","6.11.0","6.11.1","6.11.2","6.11.3","6.11.4","6.11.5","6.11.6","7.0.0","7.1.0","7.1.1","7.1.2","7.2.0","7.2.1","7.2.2","7.2.3","7.2.4","7.2.5","7.2.6","7.3.0","7.3.1","7.3.2","7.3.3","7.4.0","7.5.0","7.5.1","7.5.2","7.5.3","7.5.4","7.5.5","7.5.6","7.5.7","7.5.8","7.5.9","7.6.0","7.6.1","7.6.2","7.6.3","8.0.0-experimental","8.0.0","8.0.1-experimental","8.0.1","8.0.2","8.0.3-experimental","8.0.3","8.0.4-experimental","8.1.0-experimental","8.1.1-experimental","8.1.2-experimental","8.1.3-experimental","8.1.4-experimental","8.1.5-experimental","8.1.6-experimental","8.2.0","8.2.1","8.3.0","8.4.0","8.4.1","8.4.2","8.5.0","8.6.0","8.6.1","8.6.2","8.6.3"],"vulnerableVersions":["0.0.0","0.9.1","0.9.3","0.9.4","0.9.5","0.9.6","0.9.7","0.9.8","0.9.9","0.9.10","0.9.11","0.9.12","0.9.13","0.10.0","0.11.0","0.11.1","0.11.2","0.12.0","0.12.1","0.12.2","0.12.3","0.12.4","0.12.5","0.12.6","0.12.7","0.12.8","0.12.9","0.12.10","0.12.11","0.12.12","0.12.13","1.0.0-b1","1.0.0-b2","1.0.0-b4","1.0.0-b5","1.0.0-b6","1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","1.1.6","1.1.7","1.1.8","1.1.9","1.3.0","1.3.1","1.3.2","1.5.0","1.5.1","2.0.0-rc1","2.0.0-rc2","2.0.0-rc4","2.0.0","2.0.1","2.0.2","2.0.3","2.0.4","2.0.5","2.2.1","3.0.0","3.2.0","3.2.1","3.2.2","3.2.4","3.3.0","3.3.1","3.4.0","3.4.1","3.5.1","3.5.2","3.5.4","3.5.5","3.6.0","3.7.0","3.8.0","3.8.1","3.8.2","4.0.0-b2","4.0.0-b3","4.0.0-b4","4.0.0-b5","4.0.0","4.1.0","4.1.1","4.1.2","4.1.3","5.0.0","5.0.1","5.0.2","5.0.3","6.0.0","6.0.1","6.0.2","6.1.0","6.1.1","6.2.0","6.2.1","6.3.0","6.3.1","6.4.0","6.4.1","6.4.3","6.4.4","6.4.5","6.4.6","6.5.0","6.5.1","6.5.2","6.5.3","6.6.0","6.6.1","6.6.2","6.6.3","6.6.4","6.6.5","6.7.0","6.7.1","6.7.2","6.7.3","6.8.0","6.8.1","6.8.2","6.8.3","6.8.4","6.8.5","6.8.6","6.8.7","6.8.8","6.8.9","6.9.0-beta.0","6.9.0-pre","6.9.0","6.10.0-beta.0","6.10.0-beta.1","6.10.0-beta.2","6.10.0","6.10.1-beta.0","6.10.1","6.10.2","6.10.3","6.11.0-pre","6.11.0","6.11.1","6.11.2","6.11.3","6.11.4","6.11.5","6.11.6","7.0.0","7.1.0","7.1.1","7.1.2","7.2.0","7.2.1","7.2.2","7.2.3","7.2.4","7.2.5","7.2.6","7.3.0","7.3.1","7.3.2","7.3.3","7.4.0","7.5.0","7.5.1","7.5.2","7.5.3","7.5.4","7.5.5","7.5.6","7.5.7"],"cwe":["CWE-674"],"cvss":{"score":5.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},"range":"<=7.5.7","id":"obttosgCXRO5TNvuHV+CR29wf5pOiPblX2T3z8CyGUYvNwS1vhV728QeRWoF9oOPGJwG2pMQMz6pxWVPNzQ2Ig=="}