1 result · Clear filters · Feed
-
High 8.2
Memory exhaustion via compressed Erlang terms in the elixir-grpc Erlpack codec
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc_core and grpc allows unauthenticated attackers to exhaust server memory via a compressed Erlang external term in a gRPC message body. GRPC.Codec.Erlpack.decode/…