GR
Product
Grpc
On CISA KEVExploited in the wild
14
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 6Medium 2Low 0
Watch
Add Grpc to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-7246 | 5.3 | Aug 6 | It's possible for a gRPC client communicating with a HTTP/2 proxy to poison the HPACK table between the proxy and the backend such that other clients see failed requests Affected: before 1.58.3; 1.59.0 before 1.59.5; 1.60.0 before 1.60.2; 1.61.0 before 1.61.3; 1.62.0 before 1.62.3; 1.63.0 before 1.63.2; +2 more |
| CVE-2023-32732 | 5.3 | Jun 9 | gRPC contains a vulnerability whereby a client can cause a termination of connection between a HTTP2 proxy and a gRPC server: a base64 encoding error for `-bin` suffixed headers… Affected: before 1.53.0 |
Showing 2