Vendor
Elixir-grpc
10 known vulnerabilities in products by Elixir-grpc, 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-48853 | gRPC Erlang package vulnerable to Remote Code Execution with attacker-controlled gRPC payloads | — | |
| High | CVE-2026-71397 | Unbounded request body accumulation on streaming RPCs causes memory exhaustion in grpc_server | — | |
| High | CVE-2026-48854 | Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc | — | |
| High | CVE-2026-53430 | grpc gzip decompression bomb in GRPC.Compressor.Gzip.decompress/1 | — | |
| High | CVE-2026-124279 | Streaming request body limit enforced only after an 8 MB read in elixir-grpc grpc_server | — | |
| High | CVE-2026-121809 | CPU exhaustion via a truncated gRPC message on streaming RPCs in elixir-grpc grpc_server | — | |
| High | CVE-2026-121808 | Memory exhaustion via compressed Erlang terms in the elixir-grpc Erlpack codec | — | |
| High | CVE-2026-124278 | Path bindings ignored for gRPC Content-Types on transcoded routes in elixir-grpc grpc_server | — | |
| High | CVE-2026-48599 | Authorization bypass via path binding override in elixir-grpc/grpc HTTP transcoding | — | |
| Medium | CVE-2026-123635 | Refused calls drain the HTTP/2 connection flow-control window in elixir-grpc grpc_server | — |
Products
| Grpc | 4 | 0 |