Vulnerability Database

ROOT-APP-GOBINARY-CVE-2026-33186

Root:Go/google.golang.org/grpc
Root:Go/rootio-google.golang.org/grpc

CVE-2026-33186 in google.golang.org/grpc - Patched by Root 4 days ago

Fix available
Severity - 9.1 (Critical)

ROOT-APP-GOBINARY-CVE-2026-84304

Root:Go/google.golang.org/grpc
Root:Go/rootio-google.golang.org/grpc

CVE-2026-84304 in google.golang.org/grpc - Patched by Root 4 days ago

Fix available

ROOT-APP-GOBINARY-CVE-2026-84445

Root:Go/google.golang.org/grpc
Root:Go/rootio-google.golang.org/grpc

CVE-2026-84445 in google.golang.org/grpc - Patched by Root 4 days ago

Fix available

ROOT-APP-GOBINARY-GHSA-hrxh-6v49-42gf

Root:Go/google.golang.org/grpc
Root:Go/rootio-google.golang.org/grpc

GHSA-hrxh-6v49-42gf in google.golang.org/grpc - Patched by Root 4 days ago

Fix available

ECHO-0c50-dd5e-caad

Echo:Go/google.golang.org/grpc

See record for full details 28 Sep

Fix available

ECHO-22a1-f30a-946e

Echo:Go/google.golang.org/grpc

See record for full details 28 Sep

Fix available

ECHO-7a17-9d1b-7139

Echo:Go/google.golang.org/grpc

See record for full details 28 Sep

Fix available

GO-2026-6348

Go/google.golang.org/grpc

Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc 15 Sep

Fix available

GO-2026-6441

Go/google.golang.org/grpc

Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc 15 Sep

Fix available

GO-2026-6443

Go/google.golang.org/grpc

Server panic via missing authority or Host headers in google.golang.org/grpc 15 Sep

Fix available

GHSA-2v4p-qf9q-27wj

Go/google.golang.org/grpc

gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers 08 Sep

Fix available
Severity - 8.7 (High)

GHSA-qc2q-p7wx-3px3

Go/google.golang.org/grpc

gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion 08 Sep

Fix available
Severity - 6.3 (Medium)

ECHO-3a9e-2504-3dc0

Echo/grafana-12.3-fips
Echo/rancher-2.14
Echo:Go/google.golang.org/grpc

See record for full details 08 Sep

Fix available

ECHO-5fbc-939d-be95

Echo/rancher-2.13
Echo:Go/google.golang.org/grpc

See record for full details 08 Sep

Fix available

GHSA-vp52-pcj8-j9qc

Go/google.golang.org/grpc

gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation 01 Sep

Fix available
Severity - 8.7 (High)

GO-2026-6061

Go/google.golang.org/grpc

Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc 27 Jul

Fix available