Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS
The Hacker News 28 views
Topic timeline
Javascript
How reporting on this topic developed over time — coverage by day, outlet counts, and multi-source storylines where they exist.
Coverage evolution
How reporting on this topic developed
- Tracked since
- Mar 19
- Latest update
- Sep 9
- Outlets
- 9
- Stories
- 47
Coverage milestones derived from tracked reporting — how many outlets reported and when, not verified real-world events.
-
First detected
Coverage first appeared in the tracked window.
Schneider Electric Modicon Controllers M241, M251, M258, and LMC058 cisa.gov · Mar 19, 2026 -
Coverage expanded
Coverage expanded across 5 independent news outlets.
Expired domain leads to supply chain attack on node-ipc npm package CSO Online · May 15, 2026 -
Current status
Now classified as Developing.
-
Latest update
Most recent tracked report from The Register.
Security boffin claims airport group left API keys in client-side JavaScript for four years The Register · 3h ago
Other reports · continued
44 reports on days without concentrated coverage, newest first.
