Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-84445
  • github.com/grpc/grpc-go
 gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers 14 Sep
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-84304
  • github.com/grpc/grpc-go
 gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation 01 Sep
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-84303
  • github.com/grpc/grpc-go
 gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion 01 Sep
  • Fix available
  • Severity - 6.3 (Medium)
CVE-2026-33186
  • github.com/grpc/grpc-go
 gRPC-Go has an authorization bypass via missing leading slash in :path 20 Mar
  • Fix available
  • Severity - 9.1 (Critical)
CVE-2024-11407
  • github.com/grpc/grpc
  • github.com/grpc/grpc-go
 Denial of Service through Data corruption in gRPC-C++ 26 Nov 2024
  • Fix available
  • Severity - 6.9 (Medium)
CVE-2024-7246
  • github.com/grpc/grpc
  • github.com/grpc/grpc-go
  • github.com/grpc/grpc-java
 HPACK table poisoning in gRPC C++, Python & Ruby 06 Aug 2024
  • Fix available
  • Severity - 6.3 (Medium)
CVE-2023-44487
  • github.com/akka/akka-http
  • github.com/alibaba/tengine
  • github.com/apache/httpd
  • github.com/apache/solr
  • github.com/apache/tomcat
  • ... 33 more
 See record for full details 10 Oct 2023
  • Fix available
  • Severity - 7.5 (High)
CVE-2023-4785
  • github.com/grpc/grpc
  • github.com/grpc/grpc-go
  • github.com/grpc/grpc-java
 Denial of Service in gRPC Core 13 Sep 2023
  • Fix available
  • Severity - 7.5 (High)
CVE-2023-33953
  • github.com/grpc/grpc
  • github.com/grpc/grpc-go
 Denial-of-Service in gRPC 09 Aug 2023
  • Fix available
  • Severity - 7.5 (High)
CVE-2023-32731
  • github.com/grpc/grpc
  • github.com/grpc/grpc-go
  • github.com/grpc/grpc-java
 Information leak in gRPC 09 Jun 2023
  • Fix available
  • Severity - 7.4 (High)
CVE-2023-32732
  • github.com/grpc/grpc
  • github.com/grpc/grpc-go
  • github.com/grpc/grpc-java
 Denial-of-Service in gRPC 09 Jun 2023
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2023-1428
  • github.com/grpc/grpc
  • github.com/grpc/grpc-go
  • github.com/grpc/grpc-java
 Denial-of-Service in gRPC 09 Jun 2023
  • Fix available
  • Severity - 7.5 (High)
CVE-2017-8359
  • github.com/grpc/grpc
  • github.com/grpc/grpc-go
  • github.com/grpc/grpc-kotlin
  • github.com/grpc/grpc-node
  • github.com/grpc/grpc-web
 See record for full details 30 Apr 2017
  • No fix available
  • Severity - 9.8 (Critical)