Skip to content
OpenAdvisories

Package · Hex

grpc_core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-121808

    Memory exhaustion via compressed Erlang terms in the elixir-grpc Erlpack codec

    Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc_core and grpc allows unauthenticated attackers to exhaust server memory via a compressed Erlang external term in a gRPC message body. GRPC.Codec.Erlpack.decode/…

    elixir-grpc grpc grpc_core grpc Hex