[GHSA-xq3m-2v4x-88gg] Arbitrary code execution in protobufjs

[devPSA-Business]

Updates

• CVSS v3

Comments

Editing security advisories in the GitHub Advisory Database

Improve advisories published in the GitHub Advisory Database by making community contributions.

1. Navigate to https://github.com/advisories.
2. Select the security advisory you would like to contribute to.
3. On the right-hand side of the page, click the Suggest improvements for this vulnerability link.
4. In the "Improve security advisory" form, make the desired improvements. You can edit or add any detail. For information about correctly specifying information on the form, including affected versions, see Best practices for writing repository security advisories.
5. Under Reason for change, explain why you want to make this improvement. If you include links to supporting material this will help our reviewers.
6. When you finish editing the advisory, click Submit improvements.
7. Once you submit your community contribution, a pull request containing your changes will be created for review in github/advisory-database by the GitHub Security Lab curation team. If the advisory originated from a GitHub repository, we will also tag the original publisher for optional commentary. You can view the pull request and get notifications when it is updated or closed.

You can also open a pull request directly on an advisory file in the github/advisory-database repository. For more information, see the contribution guidelines.

[github]

Hi there @alexander-fenster! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[devPSA-Business]

approved