google.golang.org/grpc vulnerabilities (Go)
7 vulnerabilities.
-
google.golang.org/grpcGo gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers 8.7 High -
google.golang.org/grpcGo gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation 8.7 High -
google.golang.org/grpcGo gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion 6.3 Medium -
google.golang.org/grpcGo gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities 8.8 High -
google.golang.org/grpcGo gRPC-Go has an authorization bypass via missing leading slash in :path 9.1 Critical -
google.golang.org/grpcGo Private tokens could appear in logs if context containing gRPC metadata is logged in github.com/grpc/grpc-go No score -
google.golang.org/grpcGo gRPC-Go HTTP/2 Rapid Reset vulnerability 7.5 High