Go/google.golang.org/grpc CVE-2026-84303: medium 6.3, EPSS 0.31%
Bypass of xDS RBAC HTTP filter header matching in google.golang.org/grpc
Action: Upgrade google.golang.org/grpc to 1.83.1 or later.
go get google.golang.org/grpc@v1.83.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.83.1 | - |
Fixed versions
| 1.83.1 |
Sources
- osv: GO-2026-6441
- nvd: CVE-2026-84303
- https://github.com/grpc/grpc-go/security/advisories/GHSA-qc2q-p7wx-3px3
- https://github.com/grpc/grpc-go/pull/9332
CVE-2026-84303 · published · modified · JSON