Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
ROOT-APP-GOBINARY-CVE-2026-33186
  • Root:Go/google.golang.org/grpc
  • Root:Go/rootio-google.golang.org/grpc
CVE-2026-33186 in google.golang.org/grpc - Patched by Root 11 hours ago
  • Fix available
  • Severity - 9.1 (Critical)
ROOT-APP-GOBINARY-CVE-2026-84304
  • Root:Go/google.golang.org/grpc
  • Root:Go/rootio-google.golang.org/grpc
CVE-2026-84304 in google.golang.org/grpc - Patched by Root 11 hours ago
  • Fix available
ROOT-APP-GOBINARY-CVE-2026-84445
  • Root:Go/google.golang.org/grpc
  • Root:Go/rootio-google.golang.org/grpc
CVE-2026-84445 in google.golang.org/grpc - Patched by Root 11 hours ago
  • Fix available
ROOT-APP-GOBINARY-GHSA-hrxh-6v49-42gf
  • Root:Go/google.golang.org/grpc
  • Root:Go/rootio-google.golang.org/grpc
GHSA-hrxh-6v49-42gf in google.golang.org/grpc - Patched by Root 12 hours ago
  • Fix available
ECHO-0c50-dd5e-caad
  • Echo:Go/google.golang.org/grpc
See record for full details yesterday
  • Fix available
ECHO-22a1-f30a-946e
  • Echo:Go/google.golang.org/grpc
See record for full details yesterday
  • Fix available
ECHO-7a17-9d1b-7139
  • Echo:Go/google.golang.org/grpc
See record for full details yesterday
  • Fix available
GO-2026-6348
  • Go/google.golang.org/grpc
Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc 15 Sep
  • Fix available
GO-2026-6441
  • Go/google.golang.org/grpc
Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc 15 Sep
  • Fix available
GO-2026-6443
  • Go/google.golang.org/grpc
Server panic via missing authority or Host headers in google.golang.org/grpc 15 Sep
  • Fix available
GHSA-2v4p-qf9q-27wj
  • Go/google.golang.org/grpc
gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers 08 Sep
  • Fix available
  • Severity - 8.7 (High)
GHSA-qc2q-p7wx-3px3
  • Go/google.golang.org/grpc
gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion 08 Sep
  • Fix available
  • Severity - 6.3 (Medium)
ECHO-3a9e-2504-3dc0
  • Echo/grafana-12.3-fips
  • Echo/rancher-2.14
  • Echo:Go/google.golang.org/grpc
See record for full details 08 Sep
  • Fix available
ECHO-5fbc-939d-be95
  • Echo/rancher-2.13
  • Echo:Go/google.golang.org/grpc
See record for full details 08 Sep
  • Fix available
GHSA-vp52-pcj8-j9qc
  • Go/google.golang.org/grpc
gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation 01 Sep
  • Fix available
  • Severity - 8.7 (High)
GO-2026-6061
  • Go/google.golang.org/grpc
Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc 27 Jul
  • Fix available