AB
Product
Apache bRPC
by Apache Software Foundation · last CVE Oct 21, 2026
38
CVEs
0
On KEV
9.8
Max CVSS
35
New 30D
Severity mix
Critical 1High 5Medium 4Low 0
Watch

Add Apache bRPC to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-82230
7.5
1%
Oct 21
Apache bRPC: Stack Exhaustion via Unbounded Recursion in mcpack2pb Parser
Affected: before 1.18.0
CVE-2026-74757
7.5
1%
Oct 21
Apache bRPC: Uncontrolled Memory Allocation via Malicious mcpack Array Item Count
Affected: before 1.18.0
CVE-2026-56386
7.5
1%
Oct 21
Apache bRPC: Integer Underflow and Out-of-Bounds Read in HTTP/2 DATA Frame Parser
Affected: before 1.18.0
CVE-2025-59789
7.5
2%
Dec 1
Apache bRPC: Stack Exhaustion via Unbounded Recursion in JSON Parser
Affected: before 1.15.0
CVE-2025-54472
7.5
1%
Aug 14
Apache bRPC: Redis Parser Remote Denial of Service
Affected: before 1.14.1
Showing 5