grpc/grpc-node Security Advisories | GitStock

high2026-09-30

@grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized

GHSA-m9gg-hp2v-232j · CVE-2026-101916

low2026-09-30

@grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messages

GHSA-f596-whhp-79r4 · CVE-2026-101915

medium2026-09-28

@grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches

GHSA-88h9-xgvx-hvf2 · CVE-2026-101914

high2026-06-11

@grpc/grpc-js: A malformed request can cause a server crash

GHSA-5375-pq7m-f5r2 · CVE-2026-48068

high2026-06-11

@grpc/grpc-js: An incoming malformed compressed message can cause a client or server crash

GHSA-99f4-grh7-6pcq · CVE-2026-48069

medium2024-06-10

@grpc/grpc-js can allocate memory for incoming messages well above configured limits

GHSA-7v5v-9h63-cj86 · CVE-2024-37168