Login Request a demo
GR
Product
grpc-node
by grpc · last CVE Sep 28, 2026
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 3Medium 1Low 1
Severity
All severities5Critical0High3Medium1Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add grpc-node to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-48069
7.5
1%
Jul 14
@grpc/grps-js: An incoming malformed compressed message can cause a client or server crash
Affected: < 1.9.16; >= 1.10.0, < 1.10.12; >= 1.11.0, < 1.11.4; >= 1.12.0, < 1.12.7; >= 1.13.0, < 1.13.5; >= 1.14.0, < 1.14.4
CVE-2026-48068
7.5
1%
Jul 14
@grpc/grps-js: A malformed request can cause a server crash
Affected: < 1.9.16; >= 1.11.0, < 1.11.4; >= 1.12.0, < 1.12.7; >= 1.13.0, < 1.13.5; >= 1.14.0, < 1.14.4; >= 1.10.0, < 1.10.12
CVE-2026-101916
7.4
0%
Sep 28
@grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized
Affected: < 1.13.6; >= 1.14.0, < 1.14.5
CVE-2026-101914
6.5
0%
Sep 28
@grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches
Affected: < 1.13.1; >= 1.14.0, < 1.14.1
CVE-2026-101915
3.7
0%
Sep 28
@grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messages
Affected: < 1.13.6; >= 1.14.0, < 1.14.5
Showing 5