Skip to content
OpenAdvisories

Package · crates.io

connectrpc

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Unscored —
    GHSA-jx5x-3mcr-qp8r

    Finished streaming calls keep reading a stalled request body indefinitely

    Affected versions of `connectrpc` start a background task to read the request body of every client-streaming and bidirectional-streaming call, before the interceptors or the handler run. A call can finish before it has consumed its request: the handler can re…

    connectrpc crates.io