Skip to content
OpenAdvisories

Product · Spring

Spring gRPC

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-40968

    Spring gRPC SecurityContext leaks across requests on authorization failure

    When an authenticated user is denied access to a gRPC method, their authenticated identity remains bound to the gRPC worker thread and can be inherited by a subsequent unauthenticated request on the same thread. This may allow the subsequent user to gain esca…

    Spring Spring gRPC org.springframework.grpc:spring-grpc Maven