PkgSeer

Vulnerabilities

Last updated 38 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
grpc CPU exhaustion via a truncated gRPC message on streaming RPCs in elixir-grpc grpc_server Unknown 3 hours ago 3 hours ago
grpc_server CPU exhaustion via a truncated gRPC message on streaming RPCs in elixir-grpc grpc_server Unknown 3 hours ago 3 hours ago
grpc_server Streaming request body limit enforced only after an 8 MB read in elixir-grpc grpc_server Unknown 3 hours ago 3 hours ago
grpc Memory exhaustion via compressed Erlang terms in the elixir-grpc Erlpack codec Unknown 4 hours ago 3 hours ago
grpc_core Memory exhaustion via compressed Erlang terms in the elixir-grpc Erlpack codec Unknown 4 hours ago 3 hours ago
grpc Path bindings ignored for gRPC Content-Types on transcoded routes in elixir-grpc grpc_server Unknown 3 hours ago 3 hours ago
grpc_server Path bindings ignored for gRPC Content-Types on transcoded routes in elixir-grpc grpc_server Unknown 3 hours ago 3 hours ago
grpc_server Refused calls drain the HTTP/2 connection flow-control window in elixir-grpc grpc_server Unknown 4 hours ago 3 hours ago
@grpc/grpc-js-xds @grpc/grpc-js: safe_regex incorrectly applies partial string matching for patterns with alternation Medium Risk 4.8 20 hours ago 20 hours ago
@grpc/grpc-js-xds @grpc/grpc-js: RBAC override configs in VirtualHost and Route resources are not applied Medium Risk 6.0 20 hours ago 20 hours ago
grpc_server Unbounded request body accumulation on streaming RPCs causes memory exhaustion in grpc_server Unknown 6 days ago 6 days ago
@grpc/grpc-js-xds @grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches Medium Risk 6.5 1 month ago 1 month ago
google.golang.org/grpc Server panic via missing authority or Host headers in google.golang.org/grpc Unknown 1 month ago 1 month ago
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs Low Risk 3.0 1 month ago 1 month ago
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs in go.opentelemetry.io/otel/exporters/otlp/otlptrace Unknown 1 month ago 1 month ago
@grpc/grpc-js @grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messages Low Risk 3.7 1 month ago 1 month ago
@grpc/grpc-js @grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized High Risk 7.4 1 month ago 1 month ago
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning Medium Risk 6.0 1 month ago 1 month ago
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc Unknown 1 month ago 1 month ago
google.golang.org/grpc gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers High Risk 8.0 2 months ago 1 month ago
grpc Authorization bypass via path binding override in elixir-grpc/grpc HTTP transcoding Unknown 5 months ago 1 month ago
grpc Remote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpc Unknown 5 months ago 1 month ago
grpc Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc Unknown 5 months ago 1 month ago
google.golang.org/grpc gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation High Risk 8.0 2 months ago 1 month ago
google.golang.org/grpc gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion Medium Risk 6.0 2 months ago 1 month ago
google.golang.org/grpc Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc Unknown 1 month ago 1 month ago
google.golang.org/grpc Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc Unknown 1 month ago 1 month ago
google.golang.org/grpc gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities High Risk 8.0 3 months ago 2 months ago
@grpc/grpc-js @grpc/grpc-js: An incoming malformed compressed message can cause a client or server crash High Risk 7.5 5 months ago 2 months ago
@grpc/grpc-js @grpc/grpc-js: A malformed request can cause a server crash High Risk 7.5 5 months ago 2 months ago
google.golang.org/grpc gRPC-Go has an authorization bypass via missing leading slash in :path Critical 9.1 7 months ago 2 months ago
io.grpc:grpc-netty-shaded Netty affected by MadeYouReset HTTP/2 DDoS vulnerability High Risk 7.5 1 year ago 2 months ago
google.golang.org/grpc Private tokens could appear in logs if context containing gRPC metadata is logged in github.com/grpc/grpc-go Low Risk 3.0 2 years ago 2 months ago
@grpc/grpc-js @grpc/grpc-js can allocate memory for incoming messages well above configured limits Medium Risk 5.3 2 years ago 2 months ago
github.com/mostynb/go-grpc-compression go-grpc-compression has a zstd decompression bombing vulnerability High Risk 7.5 2 years ago 2 months ago
go.opentelemetry.io/collector/config/configgrpc Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPC High Risk 8.2 2 years ago 2 months ago
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc otelgrpc DoS vulnerability due to unbound cardinality metrics High Risk 7.5 3 years ago 2 months ago
google.golang.org/grpc gRPC-Go HTTP/2 Rapid Reset vulnerability High Risk 7.5 3 years ago 2 months ago
grpcio Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms) High Risk 7.5 3 years ago 2 months ago
grpc Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms) High Risk 7.5 3 years ago 2 months ago
grpcio gRPC connection termination issue Medium Risk 5.3 3 years ago 2 months ago
io.grpc:grpc-protobuf gRPC connection termination issue Medium Risk 5.3 3 years ago 2 months ago
grpc gRPC connection termination issue Medium Risk 5.3 3 years ago 2 months ago
grpcio Connection confusion in gRPC High Risk 7.4 3 years ago 2 months ago
io.grpc:grpc-protobuf Connection confusion in gRPC High Risk 7.4 3 years ago 2 months ago
grpc Connection confusion in gRPC High Risk 7.4 3 years ago 2 months ago
grpcio gRPC Reachable Assertion issue High Risk 7.5 3 years ago 2 months ago
io.grpc:grpc-protobuf gRPC Reachable Assertion issue High Risk 7.5 3 years ago 2 months ago
grpc gRPC Reachable Assertion issue High Risk 7.5 3 years ago 2 months ago
grpc gRPC Erlang package has unbounded gzip decompression (decompression bomb) High Risk 8.0 2 months ago 2 months ago
Data courtesy of OSV.dev
Page 1