Skip to content
OpenAdvisories

Product · Google

gRPC

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2024-7246

    HPACK table poisoning in gRPC C++, Python & Ruby

    It's possible for a gRPC client communicating with a HTTP/2 proxy to poison the HPACK table between the proxy and the backend such that other clients see failed requests. It's also possible to use this vulnerability to leak other clients HTTP header keys, but…

    Google gRPC grpc grpc Debian Ubuntu
  • Medium 5.3
    CVE-2023-32732

    Denial-of-Service in gRPC

    gRPC contains a vulnerability whereby a client can cause a termination of connection between a HTTP2 proxy and a gRPC server: a base64 encoding error for `-bin` suffixed headers will result in a disconnection by the gRPC server, but is typically allowed by HT…

    Google gRPC grpc grpc Debian Ubuntu Maven PyPI RubyGems