Vulnerability GO-2026-6348
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
4 hours ago
September 15, 2026 at 06:39 PM UTC
Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc
v1.0.0 - v1.83.0
v1.0.0 - v1.83.0
Summary
Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc
Details
Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
4 hours ago
Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc
v1.0.0 - v1.83.0 GO-2026-6441
v1.0.0 - v1.83.0 GO-2026-6441
Unknown
4 hours ago
Server panic via missing authority or Host headers in google.golang.org/grpc
v1.0.0 - v1.82.1 GO-2026-6443
v1.0.0 - v1.82.1 GO-2026-6443
High Risk
7 days ago
gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers
v1.0.0 - v1.82.1 and v1.83.0 - v1.83.1 and v1.84.0-dev - v1.85.0-dev GHSA-2v4p-qf9q-27wj
v1.0.0 - v1.82.1 and v1.83.0 - v1.83.1 and v1.84.0-dev - v1.85.0-dev GHSA-2v4p-qf9q-27wj
Medium Risk
7 days ago
gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion
v1.0.0 - v1.83.0 GHSA-qc2q-p7wx-3px3
v1.0.0 - v1.83.0 GHSA-qc2q-p7wx-3px3
High Risk
14 days ago
gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation
v1.0.0 - v1.83.0 GHSA-vp52-pcj8-j9qc
v1.0.0 - v1.83.0 GHSA-vp52-pcj8-j9qc
Impacted packages
Timeline
Published
4 hours ago
September 15, 2026 at 06:39 PM UTC
Last Modified
4 hours ago
September 15, 2026 at 07:00 PM UTC