What’s Vulnerable › Products

Spring gRPC vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Spring gRPC version is affected

Latest Spring gRPC vulnerabilities

• CVE-2026-40969 — Spring gRPC AuthenticationException message reflected to remote client (CVSS 5.3)
• CVE-2026-40968 — Spring gRPC SecurityContext leaks across requests on authorization failure (CVSS 8.8)