GR
Product
grpc-node
by grpc · last CVE Sep 28, 2026
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 2Low 1
Watch

Add grpc-node to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-101914
6.5
0%
Sep 28
@grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches
Affected: < 1.13.1; >= 1.14.0, < 1.14.1
CVE-2024-37168
5.3
1%
Jun 10
@grpc/grpc-js can allocate memory for incoming messages well above configured limits
Affected: >= 1.10.0, < 1.10.9; >= 1.9.0, < 1.9.15; < 1.8.22
Showing 2