BR
Product
Brpc
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 1Low 0
Watch
Add Brpc to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-60021 | 9.8 | Jan 16 | Apache bRPC: Remote command injection vulnerability in heap builtin service Affected: 1.11.0 before 1.15.0 |
| CVE-2023-31039 | 9.8 | May 8 | Security vulnerability in Apache bRPC <1.5.0 on all platforms allows attackers to execute arbitrary code via ServerOptions::pid_file Affected: 0.9.0 before 1.5.0 |
| CVE-2025-59789 | 7.5 | Dec 1 | Apache bRPC: Stack Exhaustion via Unbounded Recursion in JSON Parser Affected: before 1.15.0 |
| CVE-2025-54472 | 7.5 | Aug 14 | Unlimited memory allocation in redis protocol parser in Apache bRPC (all versions < 1.14.1) on all platforms allows attackers to crash the service via network Affected: before 1.14.1 |
| CVE-2024-23452 | 7.5 | Feb 8 | Request smuggling vulnerability in HTTP server in Apache bRPC 0.9.5~1.7.0 on all platforms allows attacker to smuggle request Affected: 0.9.5 before 1.8.0 |
| CVE-2023-45757 | 6.1 | Oct 16 | Security vulnerability in Apache bRPC <=1.6.0 on all platforms allows attackers to inject XSS code to the builtin rpcz page Affected: before 1.6.1 |
Showing 6