GHSA-m86m-5m44-pc93
Denial of Service in grpc-ts-health-check
Versions of grpc-ts-health-check prior to 2.0.0 are vulnerable to Denial of Service. The package exposes an API endpoint that may allow attackers to set the service's health status to failing. This can lead to Denial of Service as Kubernetes blocks traffic to services with a failing status.
Recommendation
Upgrade to version 2.0.0 or later.
What each source reports
GitHub AdvisoriesNo score
Denial of Service in grpc-ts-health-check
Versions of grpc-ts-health-check prior to 2.0.0 are vulnerable to Denial of Service. The package exposes an API endpoint that may allow attackers to set the service's health status to failing. This can lead to Denial of Service as Kubernetes blocks traffic to services with a failing status.
Recommendation
Upgrade to version 2.0.0 or later.
- Record
GHSA-m86m-5m44-pc93- Updated
- 2026-11-02
OSVNo score
Denial of Service in grpc-ts-health-check
Versions of grpc-ts-health-check prior to 2.0.0 are vulnerable to Denial of Service. The package exposes an API endpoint that may allow attackers to set the service's health status to failing. This can lead to Denial of Service as Kubernetes blocks traffic to services with a failing status.
Recommendation
Upgrade to version 2.0.0 or later.
- Record
GHSA-m86m-5m44-pc93- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
grpc-ts-health-checknpm | before 2.0.0 | 2.0.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-m86m-5m44-pc93 is a vulnerability with no CVSS score yet in grpc-ts-health-check, published September 3, 2020. No source lists public exploit code. Fixed in grpc-ts-health-check 2.0.0.