News Score: Score the News, Sort the News, Rewrite the Headlines

Critical flaw in Protobuf library enables JavaScript code execution

Proof-of-concept exploit code has been published for a critical remote code execution flaw in protobuf.js, a widely used JavaScript implementation of Google's Protocol Buffers. The tool is highly popular in the Node Package Manager (npm) registry, with an average of nearly 50 million weekly downloads. It is used for inter-service communication, in real-time applications, and for efficient storage of structured data in databases and cloud environments. In a report on Friday, application security ...

Read more at bleepingcomputer.com

© News Score  score the news, sort the news, rewrite the headlines