All products

@grpc/grpc-js-xds

npm · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
@grpc/grpc-js: safe_regex incorrectly applies partial string matching for patterns with alternationCVE-2026-126367 · GHSA-R7HQ-Q2XM-6C5M @grpc/grpc-js-xds npm Medium Fix reported
@grpc/grpc-js: RBAC override configs in VirtualHost and Route resources are not appliedCVE-2026-128065 · GHSA-GG5J-6742-V827 @grpc/grpc-js-xds npm Medium Fix reported
@grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matchesCVE-2026-101914 · GHSA-88H9-XGVX-HVF2 @grpc/grpc-js-xds npm Medium Fix reported