BR
Product
Brpc
by Apache · last CVE Jan 16, 2026
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 1Low 0
Watch

Add Brpc to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-59789
7.5
2%
Dec 1
Apache bRPC: Stack Exhaustion via Unbounded Recursion in JSON Parser
Affected: before 1.15.0
CVE-2025-54472
7.5
1%
Aug 14
Unlimited memory allocation in redis protocol parser in Apache bRPC (all versions < 1.14.1) on all platforms allows attackers to crash the service via network
Affected: before 1.14.1
CVE-2024-23452
7.5
2%
Feb 8
Request smuggling vulnerability in HTTP server in Apache bRPC 0.9.5~1.7.0 on all platforms allows attacker to smuggle request
Affected: 0.9.5 before 1.8.0
Showing 3