Skip to content
Threat Feed
Subscribe

Product

@Grpc/Grpc-Js (< 1.13.6, >= 1.14.0, < 1.14.5)

1 brief RSS
high advisory

Improper Authentication in @grpc/grpc-js

The @grpc/grpc-js library contains an authentication bypass vulnerability (CVE-2026-101916) where unauthorized client certificates may be treated as authorized when requireClientCertificate is disabled.

@grpc/grpc-js +1 vulnerability grpc rbac authentication-bypass
1c