An open index of dependabot pull requests across open source projects.

google.golang.org/grpc

Ecosystem:
go
Package URL:
pkg:golang/google.golang.org/grpc
Total PRs:
15,771 Dependabot PRs
Latest PR:
about 6 hours ago
Unique Repositories:
3,434 repositories
Unique Repos (30 days):
437 repositories
Security Advisories
gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers
GHSA-2v4p-qf9q-27wj CVE-2026-84445 HIGH published 21 days ago • updated 4 days ago
A vulnerability exists in gRPC-Go servers configured with `xds.NewGRPCServer()` where a crafted request missing both `:authority` and `Host` header...
gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation
GHSA-vp52-pcj8-j9qc CVE-2026-84304 HIGH published 28 days ago • updated 4 days ago
### Impact An unauthenticated remote attacker can initiate a gRPC stream and purposefully fragment their payload into millions of tiny (e.g., 1-byt...
gRPC-Go HTTP/2 Rapid Reset vulnerability
GHSA-m425-mq94-257g HIGH published almost 3 years ago • updated 4 days ago
### Impact In affected releases of gRPC-Go, it is possible for an attacker to send HTTP/2 requests, cancel them, and send subsequent requests, whic...
gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion
GHSA-qc2q-p7wx-3px3 CVE-2026-84303 MODERATE published 21 days ago • updated 2 days ago
### Summary A vulnerability in the xDS RBAC HTTP filter implementation in grpc-go allows remote attackers to bypass authorization policies (specifi...
gRPC-Go has an authorization bypass via missing leading slash in :path
GHSA-p77j-4mvh-x3m3 CVE-2026-33186 CRITICAL published 7 months ago • updated 5 days ago
### Impact _What kind of vulnerability is it? Who is impacted?_ It is an **Authorization Bypass** resulting from **Improper Input Validation** of ...
Recent PRs
Package Details
Name: google.golang.org/grpc
Ecosystem: go
PURL Type: golang
Package URL: pkg:golang/google.golang.org/grpc
JSON API: View JSON
Security Advisories

7

Active advisories
CRITICAL 1
HIGH 4
MODERATE 1
LOW 1
View All golang Advisories
Package Information
Description:

Package grpc implements an RPC system called gRPC. See grpc.io for more information about gRPC.

Homepage: https://github.com/grpc/grpc-go
Latest Release: v1.73.0
over 1 year ago
Dependent Repos: 158,189
Dependent Packages: 56,663
Ranking: Top 0.0029% by dependent repos Top 0.0011% by dependent pkgs
PR Status
Open 6,117 (38.8%)
Merged 1,936 (12.3%)
Closed 5,216 (33.1%)
PR Types
Minor 10,531 (66.8%)
Patch 2,737 (17.4%)