Critical flaw in Protobuf library enables JavaScript code execution

[Critical] A proof-of-concept exploit has been published for a critical remote code execution flaw in protobuf.js, the JavaScript implementation of Google’s Protocol Buffers.

Source: BleepingComputer