Package · Wolfi

grpc-1.83

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 8.7

CVE-2026-84445

gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers

gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProce…

grpc grpc-go katib-suggestion-hyperopt katib-suggestion-goptuna-compat Debian Ubuntu Azure Linux Wolfi Go

Sep 14, 2026