Product by Google
Grpc-node
6 known vulnerabilities in Grpc-node (Google), 0 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-48069 | @grpc/grps-js: An incoming malformed compressed message can cause a client or server crash | 7.5 | |
| High | CVE-2026-48068 | @grpc/grps-js: A malformed request can cause a server crash | 7.5 | |
| High | CVE-2026-101916 | Google Grpc-node: Improper Certificate Validation | 7.4 | |
| Medium | CVE-2026-101914 | Google Grpc-node: Partial String Comparison | 6.5 | |
| Medium | CVE-2024-37168 | @grpc/grpc-js can allocate memory for incoming messages well above configured limits | 5.3 | |
| Low | CVE-2026-101915 | Google Grpc-node: Server-generated Error Message Containing Sensitive Information | 3.7 |