All the vulnerabilities related to the version 6.7.2 of the package
Denial of Service in protobufjs
Versions of protobufjs
before 5.0.3 and 6.8.6 are vulnerable to a regular expression denial of service when parsing crafted invalid *.proto files.
Update to version 5.0.3, 6.8.6 or later.