Skip to content
OpenAdvisories

Product · Spring

Spring gRPC

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-40969

    Spring gRPC AuthenticationException message reflected to remote client

    The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status description. This allows an attacker to obtain information about the authentication failure, which may be useful for further attac…

    Spring Spring gRPC org.springframework.grpc:spring-grpc Maven