|
A critical remote code execution vulnerability in protobuf.js, Google's widely-used Protocol Buffers library for JavaScript, now has public exploit code available. Immediate patching is required across dependent applications.
► This affects the entire JavaScript ecosystem and demonstrates how serialization libraries—trusted dependencies far down the chain—can become single points of catastrophic failure.
|