Product by Apache Software Foundation
Apache Brpc
6 known vulnerabilities in Apache Brpc (Apache Software Foundation), 0 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2025-60021 | Apache bRPC: Remote command injection vulnerability in heap builtin service | 9.8 | |
| Critical | CVE-2023-31039 | Apache bRPC: ServerOptions.pid_file may cause arbitrary code execution | 9.8 | |
| High | CVE-2025-59789 | Apache bRPC: Stack Exhaustion via Unbounded Recursion in JSON Parser | 7.5 | |
| High | CVE-2024-23452 | Apache bRPC: HTTP request smuggling vulnerability | 7.5 | |
| High | CVE-2025-54472 | Apache bRPC: Redis Parser Remote Denial of Service | 7.5 | |
| Medium | CVE-2023-45757 | Apache bRPC: The builtin service rpcz page has an XSS attack vulnerability | 6.1 |