Security
فارسی
All products

google.golang.org/grpc

Go · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headersCVE-2026-84445 · GHSA-2V4P-QF9Q-27WJVersion ranges need review. google.golang.org/grpc Go High Fix reported
gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame FragmentationCVE-2026-84304 · GHSA-VP52-PCJ8-J9QCVersion ranges need review. google.golang.org/grpcOpenShift Pipelines/openshift-pipelines/pipelines-chains-controller-rhel9 GoRed Hat High Fix reported
gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasionCVE-2026-84303 · GHSA-QC2Q-P7WX-3PX3Version ranges need review. google.golang.org/grpcRed Hat OpenShift AI (RHOAI)/rhoai/odh-kuberay-operator-controller-rhel9 GoRed Hat Medium Fix reported
gRPC-Go: xDS RBAC and HTTP/2 VulnerabilitiesGHSA-HRXH-6V49-42GF · GO-2026-6061Version ranges need review. google.golang.org/grpc Go High Fix reported
gRPC-Go has an authorization bypass via missing leading slash in :pathCVE-2026-33186 · GHSA-P77J-4MVH-X3M3Version ranges need review. google.golang.org/grpcAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Critical Fix reported
Private tokens could appear in logs if context containing gRPC metadata is logged in github.com/grpc/grpc-goGHSA-XR7Q-JX4M-X55M · GO-2024-2978Version ranges need review. google.golang.org/grpc Go Low Fix reported
gRPC-Go HTTP/2 Rapid Reset vulnerabilityGHSA-M425-MQ94-257G · GO-2023-2153Version ranges need review. google.golang.org/grpc Go High Fix reported