Skip to content
OpenAdvisories

Package · Ubuntu

golang-google-grpc

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.7
    CVE-2026-84304

    gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation

    gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when…

    grpc grpc-go katib-suggestion-hyperopt katib-suggestion-goptuna-compat Debian Ubuntu Azure Linux Wolfi Go
  • High 7.5
    CVE-2019-9515 EPSS 87%

    Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service

    Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the peer reply with one acknowledgement per SETTINGS frame, an …

    nodejs trafficserver netty trafficserver Debian Ubuntu Alpine
  • High 7.5
    CVE-2019-9514 EPSS 83%

    Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service

    Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depe…

    nodejs go golang-1.8 golang-1.10 Debian Ubuntu Azure Linux Alpine