Go/google.golang.org/grpc: high 7.5
gRPC-Go HTTP/2 Rapid Reset vulnerability
Action: Upgrade google.golang.org/grpc to 1.56.3 or later.
go get google.golang.org/grpc@v1.56.3go get google.golang.org/grpc@v1.57.1go get google.golang.org/grpc@v1.58.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.56.3 | - |
| 1.57.0 | 1.57.1 | - |
| 1.58.0 | 1.58.3 | - |
Fixed versions
| 1.56.3 | 1.57.1 | 1.58.3 |
Sources
- osv: GHSA-m425-mq94-257g
- https://github.com/grpc/grpc-go/security/advisories/GHSA-m425-mq94-257g
- https://nvd.nist.gov/vuln/detail/CVE-2023-44487
- https://github.com/grpc/grpc-go/pull/6703
- https://github.com/grpc/grpc-go/commit/f2180b4d5403d2210b30b93098eb7da31c05c721
- https://github.com/grpc/grpc-go
published · modified · JSON