grpc
Hex · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| gRPC Erlang package has unbounded gzip decompression (decompression bomb) | grpc | Hex | High | Fix reported | |
| gRPC Erlang package has unbounded request body accumulation in `read_full_body/3` | grpc | Hex | High | Fix reported | |
| gRPC Erlang package's path bindings are overridable by query string and request body | grpc | Hex | High | Fix reported | |
| gRPC Erlang package vulnerable to Remote Code Execution with attacker-controlled gRPC payloads | grpc | Hex | Critical | Fix reported |