Browse CVEs

CRITICAL 9.1 CVE-2026-33186 gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of … Grpc 1.79.3+ Fix from $2,3002026-03-20 HIGH 7.5 CVE-2024-11407 There exists a denial of service through Data corruption in gRPC-C++ - gRPC-C++ servers with transmit zero copy enabled through the channel arg GRPC_… Grpc 1.66.1+ Fix from $1,9502024-11-26 MEDIUM 5.3 CVE-2024-7246 It's possible for a gRPC client communicating with a HTTP/2 proxy to poison the HPACK table between the proxy and the backend such that other clients… Grpc 1.58.3 / 1.59.5+ Fix from $1,6002024-08-06 HIGH 7.5 CVE-2023-4785 Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms (ex. Linux) allows an attacker to cause… Grpc 1.53.2 / 1.54.3+ Fix from $1,9502023-09-13 HIGH 7.5 CVE-2023-33953 gRPC contains a vulnerability that allows hpack table accounting errors could lead to unwanted disconnects between clients and servers in exceptional… Grpc 1.53.2 / 1.54.3+ Fix from $1,9502023-08-09 HIGH 7.5 CVE-2023-1428 There exists an vulnerability causing an abort() to be called in gRPC.  The following headers cause gRPC's C++ implementation to abort() when called … Grpc 1.53.0+ Fix from $1,9502023-06-09 HIGH 7.5 CVE-2023-32731 When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame. This caused any HPACK table mutations to a… Grpc 1.55.0+ Fix from $1,9502023-06-09 CRITICAL 9.8 CVE-2020-7768 The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPackageDefinition. Grpc 1.1.8 / 1.24.2+ Fix from $2,3002020-11-11 CRITICAL 9.8 CVE-2017-9431 Google gRPC before 2017-04-05 has an out-of-bounds write caused by a heap-based buffer overflow related to core/lib/iomgr/error.c. Grpc after 1.2.2 Fix from $2,3002017-06-05 CRITICAL 9.8 CVE-2017-8359 Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc_call_destroy function in core/lib/… Grpc after 1.2.1 Fix from $2,3002017-04-30 CRITICAL 9.8 CVE-2017-7860 Google gRPC before 2017-02-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the parse_unix function in core/ext/client… Grpc after 1.1.2 Fix from $2,3002017-04-14 CRITICAL 9.8 CVE-2017-7861 Google gRPC before 2017-02-22 has an out-of-bounds write related to the gpr_free function in core/lib/support/alloc.c. Grpc after 1.1.2 Fix from $2,3002017-04-14