Skip to content
OpenAdvisories

Vendor

grpc

12 known vulnerabilities.

Products

grpc-node 6 grpc-go 4 gRPC-C++ 1 grpc-swift 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-33186 Public exploit

    gRPC-Go has an authorization bypass via missing leading slash in :path

    gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests …

    grpc grpc-go rclone google-guest-agent Debian Ubuntu Alpine Go