Description
HTTP2ToRawGRPCServerCodec in gRPC Swift 1.1.1 and earlier allows remote attackers to deny service via the delivery of many small messages within a single HTTP/2 frame, leading to Uncontrolled Recursion and stack consumption.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| SwiftURL | github.com/grpc/grpc-swift | < 1.2.0 | 1.2.0 | GHSA-4rhq-vq24-88gw |