Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

grpcio

6 known vulnerabilities (4 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 4 high, 1 medium
Registry
PyPI

Advisories 6

  • Denial of Service in gRPC Core

    Affected: from 1.55.0, fixed in 1.55.3; from 1.54.0, fixed in 1.54.3; from 1.53.0, fixed in 1.53.2; from 1.55.0, fixed in 1.55.3; from 1.54.0, fixed in 1.54.3; from 1.53.0, fixed in 1.53.2.

  • Denial-of-Service in gRPC

    Affected: fixed in 1.53.2; from 1.54.0, fixed in 1.54.3; from 1.55.0, fixed in 1.55.2; from 1.56.0, fixed in 1.56.2; fixed in 1.53.2; from 1.54.0, fixed in 1.54.3; from 1.55.0, fixed in 1.55.2; from 1.56.0, fixed in 1.56.2.

  • Information leak in gRPC

    Affected: from 1.53.0, fixed in 1.53.1; from 1.54.0, fixed in 1.54.2; from 1.53.0, fixed in 1.53.1; from 1.54.0, fixed in 1.54.2.

  • CVE-2023-32732Medium 5.3

    Denial-of-Service in gRPC

    Affected: from 1.53.0, fixed in 1.53.1; from 1.54.0, fixed in 1.54.2; from 1.53.0, fixed in 1.53.1; from 1.54.0, fixed in 1.54.2.

  • Denial-of-Service in gRPC

    Affected: from 1.51.0, fixed in 1.53.0.

  • Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc_call_destroy function…

    Affected: fixed in 1.3.0.