An open index of dependabot pull requests across open source projects.

google.golang.org/grpc

Ecosystem:
go
Package URL:
pkg:golang/google.golang.org/grpc
Total PRs:
15,758 Dependabot PRs
Latest PR:
about 16 hours ago
Unique Repositories:
3,426 repositories
Unique Repos (30 days):
442 repositories
Security Advisories
gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers
GHSA-2v4p-qf9q-27wj CVE-2026-84445 HIGH published 16 days ago • updated 6 days ago
A vulnerability exists in gRPC-Go servers configured with `xds.NewGRPCServer()` where a crafted request missing both `:authority` and `Host` header...
gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation
GHSA-vp52-pcj8-j9qc CVE-2026-84304 HIGH published 23 days ago • updated 22 days ago
### Impact An unauthenticated remote attacker can initiate a gRPC stream and purposefully fragment their payload into millions of tiny (e.g., 1-byt...
gRPC-Go HTTP/2 Rapid Reset vulnerability
GHSA-m425-mq94-257g HIGH published almost 3 years ago • updated 3 days ago
### Impact In affected releases of gRPC-Go, it is possible for an attacker to send HTTP/2 requests, cancel them, and send subsequent requests, whic...
gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion
GHSA-qc2q-p7wx-3px3 CVE-2026-84303 MODERATE published 16 days ago • updated 16 days ago
### Summary A vulnerability in the xDS RBAC HTTP filter implementation in grpc-go allows remote attackers to bypass authorization policies (specifi...
gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities
GHSA-hrxh-6v49-42gf HIGH published 2 months ago • updated about 1 month ago
Multiple security vulnerabilities have been identified and addressed in grpc-go affecting the xDS RBAC authorization engine (internal/xds/rbac) and...
Recent PRs
Package Details
Name: google.golang.org/grpc
Ecosystem: go
PURL Type: golang
Package URL: pkg:golang/google.golang.org/grpc
JSON API: View JSON
Security Advisories

7

Active advisories
CRITICAL 1
HIGH 4
MODERATE 1
LOW 1
View All golang Advisories
Package Information
Description:

Package grpc implements an RPC system called gRPC. See grpc.io for more information about gRPC.

Homepage: https://github.com/grpc/grpc-go
Latest Release: v1.73.0
over 1 year ago
Dependent Repos: 158,189
Dependent Packages: 56,663
Ranking: Top 0.0029% by dependent repos Top 0.0011% by dependent pkgs
PR Status
Open 6,112 (38.8%)
Merged 1,936 (12.3%)
Closed 5,208 (33.0%)
PR Types
Minor 10,518 (66.7%)
Patch 2,737 (17.4%)