Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/11/12 10:55 p.m.•3 views

@grpc/grpc-js: RBAC override configs in VirtualHost and Route resources are not applied

Summary XdsServer in @grpc/grpc-js-xds does not apply RBACPerRoute overrides from matching Route or VirtualHost resources. When a trusted xDS control plane supplies a broad top-level ALLOW policy and a stricter override, XdsServer ACKs the resources but evaluates the RPC under the top-level polic...

6.9CVSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder