Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-101916
  • github.com/grpc/grpc-node
@grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized yesterday
  • Fix available
  • Severity - 7.4 (High)
CVE-2026-101915
  • github.com/grpc/grpc-node
@grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messages yesterday
  • Fix available
  • Severity - 3.7 (Low)
CVE-2026-101914
  • github.com/grpc/grpc-node
@grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches yesterday
  • Fix available
  • Severity - 6.5 (Medium)
CVE-2026-48069
  • github.com/grpc/grpc-node
@grpc/grps-js: An incoming malformed compressed message can cause a client or server crash 14 Jul
  • Fix available
  • Severity - 7.5 (High)
CVE-2026-48068
  • github.com/grpc/grpc-node
@grpc/grps-js: A malformed request can cause a server crash 14 Jul
  • Fix available
  • Severity - 7.5 (High)
CVE-2024-37168
  • github.com/grpc/grpc-node
@grpc/grpc-js can allocate memory for incoming messages well above configured limits 10 Jun 2024
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2020-7768
  • github.com/grpc/grpc
  • github.com/grpc/grpc-java
  • github.com/grpc/grpc-node
See record for full details 11 Nov 2020
  • Fix available
  • Severity - 9.8 (Critical)
CVE-2017-8359
  • github.com/grpc/grpc
  • github.com/grpc/grpc-go
  • github.com/grpc/grpc-kotlin
  • github.com/grpc/grpc-node
  • github.com/grpc/grpc-web
See record for full details 30 Apr 2017
  • No fix available
  • Severity - 9.8 (Critical)
CVE-2017-7861
  • github.com/grpc/grpc
  • github.com/grpc/grpc-java
  • github.com/grpc/grpc-node
See record for full details 14 Apr 2017
  • No fix available
  • Severity - 9.8 (Critical)
CVE-2017-7860
  • github.com/grpc/grpc
  • github.com/grpc/grpc-java
  • github.com/grpc/grpc-node
See record for full details 14 Apr 2017
  • No fix available
  • Severity - 9.8 (Critical)