All the vulnerabilities related to the version 6.6.5 of the package
Denial of Service in protobufjs
Versions of protobufjs
before 5.0.3 and 6.8.6 are vulnerable to a regular expression denial of service when parsing crafted invalid *.proto files.
Update to version 5.0.3, 6.8.6 or later.