Skip to content
Threat Feed
Subscribe

Product

Grpc (>= 0.4.0, < 1.0.0)

1 brief RSS
critical advisory

Critical RCE and DoS Vulnerability in Elixir gRPC Package

The GRPC.Codec.Erlpack decoder in the Elixir gRPC package is vulnerable to unauthenticated remote code execution and node-level denial of service due to insecure deserialization of untrusted gRPC payloads.

grpc +3 denial-of-service elixir erlang memory-exhaustion
3t 1c