grpc/grpc-swift · Security
Incomplete Internal State Distinction in GRPCWebToHTTP2ServerCodec
- GHSA ID
- GHSA-2jx2-qcm4-rf9h
- CVE ID
- CVE-2021-36153
- Severity
- high
- Published
- Updated
Description
Impact
Affected gRPC Swift servers are vulnerable to precondition failures when parsing certain gRPC Web requests. This may lead to a denial of service.
Patches
The problem has been fixed in 1.2.0.
Workarounds
No workaround is available. Users must upgrade.