Please refer to this vulnerability, "Upgrade com.google.protobuf:protobuf-java to version 3.4.0 or higher."
1.9.946
[org.clojure/clojurescript "1.9.946"]
[com.google.javascript/closure-compiler-unshaded "v20170910"]
...
[com.google.protobuf/protobuf-java "3.0.2"]
1.10.758
[com.google.javascript/closure-compiler-unshaded "v20200315"]
...
[com.google.protobuf/protobuf-java "3.11.1"]