protobufjs

• CVE-2026-54271 - protobufjs-cli JSON descriptor code injection 2026-06-15
• CVE-2026-41242 - protobufjs generated-code RCE 2026-06-06