GO-2024-2911: go-grpc-compression has a zstd decompression bombing vulnerability in github.com/mostynb/go-grpc-compression

go-grpc-compression

module

v1.1.9 Latest Latest Go to latest Published: Apr 28, 2021 License: Apache-2.0

Details

This respository contains go gRPC encoding wrappers for some useful compression algorithms that are not available in google.golang.org/grpc.

Path	Synopsis
lz4 Package lz4 is a wrapper for using github.com/pierrec/lz4 with gRPC.	Package lz4 is a wrapper for using github.com/pierrec/lz4 with gRPC.
snappy Package snappy is a wrapper for using github.com/golang/snappy with gRPC.	Package snappy is a wrapper for using github.com/golang/snappy with gRPC.
zstd Package zstd is a wrapper for using github.com/klauspost/compress/zstd with gRPC.	Package zstd is a wrapper for using github.com/klauspost/compress/zstd with gRPC.