What’s Vulnerable › Products

grpc-node vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your grpc-node version is affected

Latest grpc-node vulnerabilities

• CVE-2026-101916 — @grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized (CVSS 7.4)
• CVE-2026-101915 — @grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messages (CVSS 3.7)
• CVE-2026-101914 — @grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches (CVSS 6.5)
• CVE-2026-48069 — @grpc/grps-js: An incoming malformed compressed message can cause a client or server crash (CVSS 7.5)
• CVE-2026-48068 — @grpc/grps-js: A malformed request can cause a server crash (CVSS 7.5)