CVE-2026-54271 - protobufjs-cli: Code injection in pbjs static output from crafted JSON descriptor names
CVE ID :CVE-2026-54271 Published : June 22, 2026, 4:16 p.m. | 4 hours, 54 minutes ago Description :protobufjs-cli is the command line add-on for protobuf.js. Prior to 1.3.2 and 2.5.0, a previous fix for unsafe name handling in pbjs static / static-module code generation was incomplete....