Skip to content
OpenAdvisories

Package · Maven

org.springframework.grpc:spring-grpc

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 3.7
    CVE-2026-40969

    Spring gRPC AuthenticationException message reflected to remote client

    The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status description. This allows an attacker to obtain information about the authentication failure, which may be useful for further attac…

    Spring Spring gRPC org.springframework.grpc:spring-grpc Maven
  • Medium 4.3
    CVE-2026-40968

    Spring gRPC SecurityContext leaks across requests on authorization failure

    When an authenticated user is denied access to a gRPC method, their authenticated identity remains bound to the gRPC worker thread and can be inherited by a subsequent unauthenticated request on the same thread. This may allow the subsequent user to gain esca…

    Spring Spring gRPC org.springframework.grpc:spring-grpc Maven