google.golang.org/grpc vulnerabilities (Root)

4 vulnerabilities.

• google.golang.org/grpc Root gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers CVE-2026-84445 Fix available 8.7 HighSeptember 4, 2026
• google.golang.org/grpc Root gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation CVE-2026-84304 Fix available 8.7 HighSeptember 1, 2026
• google.golang.org/grpc Root gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities GHSA-hrxh-6v49-42gf Fix available 8.8 HighJuly 21, 2026
• google.golang.org/grpc Root gRPC-Go has an authorization bypass via missing leading slash in :path CVE-2026-33186 Public exploitFix available 9.1 CriticalMarch 18, 2026