GR
Product
Grpc
On CISA KEVExploited in the wild
15
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 6Medium 3Low 0
Watch
Add Grpc to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-7246 | 5.3 | Aug 6 | HPACK table poisoning in gRPC C++, Python & Ruby Affected: before 1.58.3; 1.59.0 before 1.59.5; 1.60.0 before 1.60.2; 1.61.0 before 1.61.3; 1.62.0 before 1.62.3; 1.63.0 before 1.63.2; +2 more |
| CVE-2024-37168 | 5.3 | Jun 10 | @grpc/grpc-js can allocate memory for incoming messages well above configured limits Affected: 1.10.0 before 1.10.9; 1.9.0 before 1.9.15; before 1.8.22 |
| CVE-2023-32732 | 5.3 | Jun 9 | gRPC contains a vulnerability whereby a client can cause a termination of connection between a HTTP2 proxy and a gRPC server: a base64 encoding error for `-bin` suffixed headers… Affected: before 1.53.0 |
Showing 3