Skip to content
Threat Feed
Subscribe

Product

@Grpc/Grpc-Js-Xds (< 1.13.6)

1 brief RSS
high advisory

Improper Authentication in @grpc/grpc-js

The @grpc/grpc-js library contains an authentication bypass vulnerability (CVE-2026-101916) where unauthorized client certificates may be treated as authorized when requireClientCertificate is disabled.

@grpc/grpc-js +1 vulnerability grpc rbac authentication-bypass
1c