Products: 3
    Vulnerabilities: 22
    Known Exploited: 0
    5
    Critical Level Threats
    11
    High Level Threats
    3
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-101916

    @grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized

    Last Modified: Oct 01, 2026
    Published: Sep 28, 2026

    CVE-2026-101915

    @grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messages

    Last Modified: Oct 01, 2026
    Published: Sep 28, 2026

    CVE-2026-101914

    @grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches

    Last Modified: Sep 29, 2026
    Published: Sep 28, 2026

    CVE-2026-84445

    gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers

    Last Modified: Sep 15, 2026
    Published: Sep 14, 2026

    CVE-2026-84304

    gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation

    Last Modified: Sep 02, 2026
    Published: Sep 01, 2026
    Items Per Page
    Grpc Vulnerabilities & Security CVEs | CVE-DB