encoding

package

Go to main page

Versions in this module

v1

v1.85.0-dev

Aug 18, 2026 GO-2026-6443

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.84.0-dev

Jul 14, 2026 GO-2026-6443

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.83.2

Aug 25, 2026

v1.83.1

Aug 19, 2026 GO-2026-6443

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.83.0

Jul 30, 2026 GO-2026-6348 +2 more

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.83.0-dev

Jun 8, 2026 GO-2026-6348 +1 more

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

v1.82.2

Aug 25, 2026 GO-2026-6348 +1 more

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

v1.82.1

Jul 15, 2026 GO-2026-6348 +2 more

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.82.0

Jun 30, 2026 GO-2026-6061 +3 more

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.82.0-dev

Apr 15, 2026 GO-2026-6061 +3 more

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.81.1

May 13, 2026 GO-2026-6061 +3 more

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.81.0

May 4, 2026 GO-2026-6061 +3 more

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.81.0-dev

Mar 6, 2026 GO-2026-6061 +3 more

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.80.0

Apr 1, 2026 GO-2026-6061 +3 more

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.80.0-dev

Jan 21, 2026 GO-2026-6061 +3 more

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.79.3

Mar 17, 2026 GO-2026-6061 +3 more

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.79.2

Mar 6, 2026 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.79.1

Feb 13, 2026 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.79.0

Feb 11, 2026 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.79.0-dev

Dec 11, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.78.0

Dec 23, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.78.0-dev

Oct 30, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.77.0

Nov 17, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.77.0-dev

Sep 17, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.76.0

Oct 6, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.76.0-dev

Aug 5, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.75.1

Sep 8, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.75.0

Aug 19, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.75.0-dev

Jun 25, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.74.3

Sep 9, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.74.2

Jul 22, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.74.1

Jul 17, 2025

retracted

GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.74.0

Jul 16, 2025

retracted

GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.74.0-dev

May 15, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.73.1

Sep 10, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.73.0

Jun 5, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.73.0-dev

Apr 3, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.72.3

Sep 10, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.72.2

May 26, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.72.1

May 14, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.72.0

Apr 21, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.72.0-dev

Feb 19, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.71.3

May 26, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.71.2

May 14, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.71.1

Mar 28, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.71.0

Mar 4, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.71.0-dev

Jan 8, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.70.0

Jan 23, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.70.0-dev

Dec 5, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.69.4

Jan 13, 2025 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.69.2

Dec 18, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.69.0

Dec 5, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.69.0-dev

Oct 16, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.68.2

Dec 18, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.68.1

Dec 4, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.68.0

Nov 7, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.68.0-dev

Sep 9, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.67.3

Dec 17, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.67.2

Dec 4, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.67.1

Sep 30, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.67.0

Sep 20, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.67.0-dev

Aug 16, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.66.3

Sep 30, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.66.2

Sep 11, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.66.1

Sep 9, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.66.0

Aug 28, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

Changes in this version

+ func RegisterCodecV2(codec CodecV2)

+ type CodecV2 interface

+ Marshal func(v any) (out mem.BufferSlice, err error)

+ Name func() string

+ Unmarshal func(data mem.BufferSlice, v any) error

+ func GetCodecV2(contentSubtype string) CodecV2

v1.66.0-dev

Jun 6, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.65.1

Oct 3, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.65.0

Jul 2, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.65.0-dev

May 9, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.64.1

Jul 2, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.64.0

May 14, 2024 GO-2024-2978 +5 more

GO-2024-2978: Private tokens could appear in logs if context containing gRPC metadata is logged in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.63.3

Jul 2, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.63.2

Apr 8, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.63.1

Apr 8, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.63.0

Apr 3, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.62.2

Apr 3, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.62.1

Mar 5, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.62.0

Feb 21, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.61.2

Apr 3, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.61.1

Feb 13, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.61.0

Jan 23, 2024 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.61.0-dev

Nov 14, 2023 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.60.1

Dec 18, 2023 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.60.0

Dec 11, 2023 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.60.0-dev

Oct 5, 2023 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.59.0

Oct 17, 2023 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.59.0-dev

Aug 24, 2023 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.58.3

Oct 10, 2023 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.58.2

Sep 21, 2023 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.58.1

Sep 13, 2023 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.58.0

Sep 6, 2023 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.58.0-dev

Jul 14, 2023 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.57.2

Oct 18, 2023 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.57.1

Oct 10, 2023 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.57.0

Jul 26, 2023 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.57.0-dev

Jun 2, 2023 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.56.3

Oct 10, 2023 GO-2026-4762 +4 more

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.56.2

Jul 6, 2023 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.56.1

Jun 21, 2023 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.56.0

Jun 15, 2023 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.56.0-dev

Apr 18, 2023 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.55.1

Jul 6, 2023 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.55.0

May 4, 2023 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.55.0-dev

Mar 17, 2023 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.54.1

May 5, 2023 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.54.0

Mar 21, 2023 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.53.0

Feb 7, 2023 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.53.0-dev

Dec 16, 2022 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.52.3

Jan 25, 2023 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.52.1

Jan 24, 2023 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.52.0

Jan 10, 2023 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.52.0-dev

Nov 8, 2022 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.51.0

Nov 18, 2022 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.51.0-dev

Oct 4, 2022 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.50.1

Oct 14, 2022 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.50.0

Oct 6, 2022 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.50.0-dev

Aug 15, 2022 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.49.0

Aug 23, 2022 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.49.0-dev

Jul 1, 2022 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.48.0

Jul 12, 2022 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.48.0-dev

May 23, 2022 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.47.0

May 31, 2022 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.47.0-dev

Apr 6, 2022 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.46.2

May 13, 2022 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.46.1

Apr 22, 2022 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.46.0

Apr 22, 2022 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.46.0-dev

Feb 22, 2022 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.45.0

Mar 9, 2022 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.45.0-dev

Jan 11, 2022 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.44.0

Jan 25, 2022 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.44.0-dev

Dec 6, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.43.0

Dec 14, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.43.0-dev

Oct 29, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.42.0

Nov 2, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.42.0-dev

Sep 21, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.41.1

Dec 1, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.41.0

Sep 23, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.41.0-dev

Jul 27, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.40.1

Dec 1, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.40.0

Aug 12, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.40.0-dev

Jun 15, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.39.1

Aug 5, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.39.0

Jun 29, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.39.0-dev

May 11, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.38.1

Jun 29, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.38.0

May 19, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.38.0-dev

Mar 31, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.37.1

May 11, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.37.0

Apr 7, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.37.0-dev

Feb 10, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.36.1

Mar 25, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.36.0

Feb 24, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.36.0-dev

Jan 11, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.35.1

Mar 12, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.35.0

Jan 13, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.35.0-dev

Nov 17, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.34.2

Mar 12, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.34.1

Jan 11, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.34.0

Dec 2, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.34.0-dev

Oct 8, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.33.3

Jan 11, 2021 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.33.2

Nov 6, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.33.1

Oct 20, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.33.0

Oct 8, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.33.0-dev

Aug 25, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.32.0

Sep 8, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.32.0-dev

Jul 23, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.31.1

Aug 25, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.31.0

Jul 30, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.31.0-dev

Jun 11, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.30.1

Aug 25, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.30.0

Jun 22, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.30.0-dev.1

Apr 21, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.30.0-dev

Apr 8, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.29.1

Apr 23, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.29.0

Apr 21, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.29.0-dev

Mar 5, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.28.1

Apr 6, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.28.0

Mar 10, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.28.0-pre

Jan 28, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.27.1

Feb 5, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.27.0

Jan 28, 2020 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.27.0-pre

Dec 17, 2019 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.26.0

Dec 17, 2019 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.25.1

Nov 8, 2019 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.25.0

Nov 5, 2019 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.24.0

Sep 25, 2019 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.23.1

Sep 11, 2019 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.23.0

Aug 13, 2019 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.22.3

Sep 11, 2019 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.22.2

Aug 13, 2019 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.22.1

Jul 25, 2019 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.22.0

Jul 2, 2019 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.21.4

Sep 17, 2019 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.21.3

Aug 13, 2019 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.21.2

Jul 25, 2019 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.21.1

Jun 4, 2019 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.21.0

May 22, 2019 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.20.1

Apr 18, 2019 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.20.0

Apr 9, 2019 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.19.1

Mar 20, 2019 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.19.0

Feb 26, 2019 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.18.1

Mar 20, 2019 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.18.0

Jan 15, 2019 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.17.0

Dec 4, 2018 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.16.0

Oct 23, 2018 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.15.0

Sep 11, 2018 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.14.0

Jul 31, 2018 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.13.0

Jun 19, 2018 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.12.2

Jun 7, 2018 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.12.1

Jun 6, 2018 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.12.0

May 8, 2018 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.11.3

Apr 9, 2018 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.11.2

Apr 4, 2018 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.11.1

Mar 29, 2018 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.11.0

Mar 27, 2018 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.10.1

Mar 28, 2018 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.10.0

Feb 14, 2018 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

Changes in this version

+ func RegisterCodec(codec Codec)

+ type Codec interface

+ Marshal func(v interface{}) ([]byte, error)

+ Name func() string

+ Unmarshal func(data []byte, v interface{}) error

+ func GetCodec(contentSubtype string) Codec

v1.9.2

Jan 19, 2018 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.9.1

Jan 8, 2018 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.9.0

Jan 2, 2018 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.8.2

Dec 13, 2017 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

v1.8.0

Nov 21, 2017 GO-2023-2153 +5 more

GO-2023-2153: Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc

GO-2026-4762: Authorization bypass in gRPC-Go via missing leading slash in :path in google.golang.org/grpc

GO-2026-6061: Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc

GO-2026-6348: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation in google.golang.org/grpc

GO-2026-6441: Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc

GO-2026-6443: Server panic via missing authority or Host headers in google.golang.org/grpc

Changes in this version

+ const Identity

+ func RegisterCompressor(c Compressor)

+ type Compressor interface

+ Compress func(w io.Writer) (io.WriteCloser, error)

+ Decompress func(r io.Reader) (io.Reader, error)

+ Name func() string

+ func GetCompressor(name string) Compressor

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL