1 matches found
CVE-2024-37168: Memory Allocation with Excessive Size Value
@grpc/grps-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to versions 1.10.9, 1.9.15, and 1.8.22, there are two separate code paths in which memory can be allocated per message in excess of the grpc.maxreceivemessagelength channel option: If an...
5.3CVSS6.1AI score0.00671EPSS
SaveExploits0References1
20