Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
"protobuf.js (aka protobufjs) 6.10.0 through 7.x before 7.2.5 allows Prototype Pollution, a different vulnerability than CVE-2022-25878. A user-controlled protobuf message can be used by an attacker to pollute the prototype of Object.prototype by adding and overwriting its data and functions. Exploitation can involve: (1) using the function parse to parse protobuf messages on the fly, (2) loading .proto files by using load/loadSync functions, or (3) providing untrusted input to the functions ReflectionObject.setParsedOption and util.setProperty.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-17 | 1 | Disclosure1 |
| 2026-05-12 | 2 | Disclosure1General1 |
🔴 Nodejs protobufjs, Prototype Pollution, #CVE-2023-36665 (Critical) https://dailycve.com/nodejs-protobufjs-prototype-pollution-cve-2023-36665-critical/
Post summary
Tweet highlights newly disclosed prototype‑pollution flaw (CVE-2023-36665) in Nodejs protobufjs, labeling it critical and directing readers to a dailycve article for details.
🔴 protobufjs, Prototype Pollution, #CVE-2023-36665 (critical) https://dailycve.com/protobufjs-prototype-pollution-cve-2023-36665-critical-2/
Post summary
A brief tweet announcing a prototype pollution vulnerability in protobufjs (CVE-2023-36665) labeled critical, with a link to a DailyCVE article for further details.
🔴 protobufjs, Prototype Pollution, #CVE-2023-36665 (Critical) https://dailycve.com/protobufjs-prototype-pollution-cve-2023-36665-critical/
Post summary
The post announces a critical prototype pollution flaw in protobufjs (CVE‑2023‑36665) without detailing any PoC, exploit, or mitigation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | protobufjs_project | protobufjs | - | node.js | - |