Skip to content
Threat Feed
Subscribe

Product

GRPC-Go (>= 1.84.0-Dev, < 1.85.0-Dev.0.20260825072537-93e31b48545e)

1 brief RSS
medium advisory

gRPC-Go Denial of Service via HTTP/2 Fragmentation

An unauthenticated remote attacker can exploit HTTP/2 DATA frame fragmentation in gRPC-Go versions <= 1.83.0 to cause heap memory exhaustion and application crashes.

gRPC-Go +3
1t 1c updated