Product by Elixir-grpc
Grpc
7 known vulnerabilities in Grpc (Elixir-grpc), 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-48853 | gRPC Erlang package vulnerable to Remote Code Execution with attacker-controlled gRPC payloads | — | |
| High | CVE-2026-48854 | Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc | — | |
| High | CVE-2026-53430 | grpc gzip decompression bomb in GRPC.Compressor.Gzip.decompress/1 | — | |
| High | CVE-2026-121809 | CPU exhaustion via a truncated gRPC message on streaming RPCs in elixir-grpc grpc_server | — | |
| High | CVE-2026-121808 | Memory exhaustion via compressed Erlang terms in the elixir-grpc Erlpack codec | — | |
| High | CVE-2026-124278 | Path bindings ignored for gRPC Content-Types on transcoded routes in elixir-grpc grpc_server | — | |
| High | CVE-2026-48599 | Authorization bypass via path binding override in elixir-grpc/grpc HTTP transcoding | — |