`@grpc/grpc-js`

Ecosystem:
npm

Package URL:
pkg:npm/@grpc/grpc-js

Total PRs:
984 Dependabot PRs

Latest PR:
7 days ago

Unique Repositories:
472 repositories

Unique Repos (30 days):
64 repositories

Security Advisories

@grpc/grpc-js: A malformed request can cause a server crash

GHSA-5375-pq7m-f5r2 CVE-2026-48068 HIGH published about 1 month ago • updated 1 day ago

### Impact An invalid incoming HTTP/2 stream initiation can cause a server process to crash. This affects all servers created using @grpc/grpc-js. ...

@grpc/grpc-js can allocate memory for incoming messages well above configured limits

GHSA-7v5v-9h63-cj86 CVE-2024-37168 MODERATE published about 2 years ago • updated 6 days ago

### Impact There are two separate code paths in which memory can be allocated per message in excess of the `grpc.max_receive_message_length` channe...

@grpc/grpc-js: An incoming malformed compressed message can cause a client or server crash

GHSA-99f4-grh7-6pcq CVE-2026-48069 HIGH published about 1 month ago • updated 3 days ago

### Impact An invalid incoming compressed message can cause a client or server process to crash. This affects all clients and servers that use @grp...

Prototype pollution in grpc and @grpc/grpc-js

GHSA-pp75-xfpw-37g9 CVE-2020-7768 HIGH published about 5 years ago • updated 22 days ago

"The package grpc before 1.24.4 and the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPackageDefinition."

Recent PRs

RSS Feed

🔒 security: Bump the production-dependencies group across 1 directory with 41 updates

Sheikha-Market/Sheikha-Market #131

1.14.3 → 1.14.4 Patch PR

Open 7 days ago 3 comments

Bump the npm-production-dependencies group across 2 directories with 39 updates

abhay-codes07/opentelemetry-kpt-demo #281

1.12.6 → 1.14.4 Minor PR

Closed 9 days ago 1 comment

Bump @grpc/grpc-js from 1.14.3 to 1.14.4 in /scripts

nunocoracao/blowfish #2992

1.14.3 → 1.14.4 Patch PR

Closed 10 days ago 1 comment

Bump the npm-production-dependencies group across 2 directories with 39 updates

Praveena0308/otel-microservices-platform #235

1.12.6 → 1.14.4 Minor PR

Open 10 days ago 1 comment

Bump the npm-production-dependencies group across 2 directories with 36 updates

jjyy032659/Opentelemetry #263

1.14.3 → 1.14.4 Patch PR

Closed 11 days ago 1 comment

Bump the npm-production-dependencies group across 2 directories with 39 updates

validev123/opentelemetry-demo #330

1.12.6 → 1.14.4 Minor PR

Closed 11 days ago 1 comment

Bump the npm_and_yarn group across 2 directories with 11 updates

GlacierEQ/plate #56

1.13.4 → 1.14.4 Minor PR

Open 12 days ago 2 comments

chore(deps): bump the npm-dependencies group with 75 updates

google-gemini/gemini-cli #28190

1.14.3 → 1.14.4 Patch PR

Closed 13 days ago 3 comments

build(deps): bump the npm_and_yarn group across 1 directory with 3 updates

Nicolas0315/Katala #133

1.14.3 → 1.14.4 Patch PR

Closed 14 days ago 2 comments

Bump the npm-production-dependencies group across 2 directories with 36 updates

jlawton-cribl/opentelemetry-demo #287

1.14.3 → 1.14.4 Patch PR

Closed 17 days ago 1 comment

chore(deps): bump the npm-production-dependencies group across 2 directories with 33 updates

coralogix-se/opentelemetry-demo #172

1.14.3 → 1.14.4 Patch PR

Closed 17 days ago 2 comments

Bump the npm-production-dependencies group across 2 directories with 36 updates

V0zz/OTEL_Demo #231

1.14.3 → 1.14.4 Patch PR

Closed 18 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 14 updates

clusterzx/paperless-ai #952

1.12.6 → 1.14.4 Minor PR

Closed 19 days ago 3 comments

build(deps): bump the npm-production-dependencies group across 2 directories with 36 updates

GuanceDemo/OpenTelemetry_Demo #226

1.14.3 → 1.14.4 Patch PR

Closed 19 days ago 1 comment

build(deps): bump the npm_and_yarn group across 13 directories with 16 updates

alaaeldeeng/bun #80

1.12.0 → 1.12.7 Patch PR

Closed 20 days ago 1 comment

Bump the npm_and_yarn group across 10 directories with 18 updates

nssuwan186-dev/firebase-tools #79

1.7.3 → 1.9.16 Minor PR

Closed 22 days ago 1 comment

Bump the npm_and_yarn group across 26 directories with 10 updates

Web3Auth/web3auth-examples #1491

1.9.15 → 1.9.16 Patch PR

Closed 23 days ago 2 comments

chore(deps): bump the npm-dependencies group across 1 directory with 46 updates

camunda/camunda-8-js-sdk #799

1.14.3 → 1.14.4 Patch PR

Closed 24 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 7 updates

josepensemos/openclaw #3

1.14.3 → 1.14.4 Patch PR

Closed 25 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 6 directories with 5 updates

needaccforwhonix/genai-toolbox #33

1.14.3 → 1.14.4 Patch PR

Open 25 days ago 1 comment

build(deps): bump the npm_and_yarn group across 23 directories with 15 updates

nssuwan186-dev/bun #97

1.12.0 → 1.12.7 Patch PR

Open 25 days ago 1 comment

Bump the npm_and_yarn group across 38 directories with 10 updates

Web3Auth/web3auth-examples #1486

1.9.15 → 1.9.16 Patch PR

Open 26 days ago 1 comment

Bump the npm_and_yarn group across 8 directories with 19 updates

dporkka/budibase #18

1.13.4 → 1.14.4 Minor PR

Closed 26 days ago 1 comment

Bump the npm_and_yarn group across 11 directories with 13 updates

Solizardking/hermes-of-web-3 #10

1.14.3 → 1.14.4 Patch PR

Closed 26 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 14 updates

lhy8888/uptime #83

1.8.22 → 1.14.4 Minor PR

Closed 26 days ago 2 comments

Bump the npm_and_yarn group across 8 directories with 7 updates

Rhyoss/apphosting-adapters #36

1.9.15 → 1.9.16 Patch PR

Closed 26 days ago 1 comment

Bump the npm_and_yarn group across 38 directories with 7 updates

Web3Auth/web3auth-examples #1483

1.9.15 → 1.9.16 Patch PR

Closed 27 days ago 2 comments

Bump the npm_and_yarn group across 1 directory with 3 updates

jerryshell/onpu #23

1.14.0 → 1.14.4 Patch PR

Open 27 days ago 1 comment

Bump the npm_and_yarn group across 6 directories with 4 updates

coursgranja91-hash/aspire #50

1.14.2 → 1.14.4 Patch PR

Closed 28 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 12 directories with 3 updates

RichardRosenblat/elastic-resume-base #293

1.9.15 → 1.9.16 Patch PR

Open 28 days ago 1 comment

Bump @grpc/grpc-js from 1.9.15 to 1.9.16 in /Client

Aayush987/Hangman_V2 #3

1.9.15 → 1.9.16 Patch PR

Open 28 days ago 1 comment

Bump the npm_and_yarn group across 2 directories with 8 updates

GlacierEQ/qwen-code #24

1.14.3 → 1.14.4 Patch PR

Open 28 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 12 directories with 5 updates

jeremydh911/CRM #90

1.13.4 → 1.14.4 Minor PR

Open 28 days ago 1 comment

build(deps): bump the npm_and_yarn group across 20 directories with 14 updates

CaffeeLake/bun #410

1.12.0 → 1.12.7 Patch PR

Closed 28 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 2 updates

Geneie-ai-Org/geneie-frontend #7

1.9.15 → 1.9.16 Patch PR

Closed 29 days ago 2 comments

Bump the npm_and_yarn group across 8 directories with 17 updates

dporkka/budibase #17

1.13.4 → 1.14.4 Minor PR

Closed 29 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 19 directories with 8 updates

dporkka/plasmic #185

1.9.9 → 1.14.4 Minor PR

Closed 29 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 15 updates

HarleyCoops/chroma #13

1.14.3 → 1.14.4 Patch PR

Open 29 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 15 updates

drodil/backstage-plugin-qeta #426

1.14.0 → 1.14.4 Patch PR

Open 29 days ago 1 comment

Bump the npm_and_yarn group across 8 directories with 16 updates

dporkka/budibase #16

1.13.4 → 1.14.4 Minor PR

Closed 29 days ago 1 comment

Bump the npm_and_yarn group across 2 directories with 8 updates

mitanshu-bhasin/imgnodus.com #2

1.14.3 → 1.14.4 Patch PR

Open 29 days ago 2 comments

build(deps): bump the npm_and_yarn group across 45 directories with 3 updates

hyperledger-cacti/cacti #4396

1.10.9 → 1.14.4 Minor PR

Closed 30 days ago 1 comment

chore(deps): bump @grpc/grpc-js from 1.12.6 to 1.14.4 in /workspaces/scorecard

redhat-developer/rhdh-plugins #3393

1.12.6 → 1.14.4 Minor PR

Open 30 days ago 5 comments

Bump the npm-production-dependencies group across 2 directories with 39 updates

AnnieCynthia134/opentelemetry-demo-application #295

1.12.6 → 1.14.4 Minor PR

Closed about 1 month ago 1 comment

Bump @grpc/grpc-js from 1.9.15 to 1.9.16

Bhavyansh-parihar/Apex-International-Senior-Secondary-School #5

1.9.15 → 1.9.16 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump @grpc/grpc-js from 1.9.15 to 1.9.16 in /frontend

miguelmoya1/pawdar.live #42

1.9.15 → 1.9.16 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 1 update

Gonya990/Unified_System_Core #555

1.9.15 → 1.9.16 Patch PR

Closed about 1 month ago 1 comment

chore: bump @grpc/grpc-js from 1.9.15 to 1.9.16

FranklinD10/ellin-goals #64

1.9.15 → 1.9.16 Patch PR

Closed about 1 month ago 1 comment

Bump @grpc/grpc-js from 1.9.15 to 1.9.16

artemis-smws/Artemis-Waste-Management-System #107

1.9.15 → 1.9.16 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump @grpc/grpc-js from 1.9.15 to 1.9.16 in /Chapter08/FirebaseDemo

takeo-asai/LearningAngularSecondEdition_Code #368

1.9.15 → 1.9.16 Patch PR

Closed about 1 month ago 2 comments

Package Details

Name:	`@grpc/grpc-js`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@grpc/grpc-js`
JSON API:	View JSON

Security Advisories

4

Active advisories

HIGH 3

MODERATE 1

View All npm Advisories

Package Information

Description:

gRPC Library for Node - pure JS implementation

Repository:	https://github.com/grpc/grpc-node
Homepage:	https://grpc.io/
Latest Release:	`1.13.4` about 1 year ago
Dependent Repos:	242,989
Dependent Packages:	1,412
Downloads:	66,528,040
Ranking:	Top 0.0695% by dependent repos Top 0.0407% by downloads Top 0.0519% by dependent pkgs

PR Status

Open 430 (43.7%)

Merged 55 (5.6%)

Closed 444 (45.1%)

PR Types

Major 4 (0.4%)

Minor 597 (60.7%)

Patch 328 (33.3%)