54 matches found
brpc
中文版 bRPC는 C++ 언어로 작성된 산업용 RPC 프레임워크로, 검색, 스토리지, 머신러닝, 광고, 추천 등 고성능 시스템에서 자주 사용됩니다. "bRPC"는 "더 나은 RPC"를 의미합니다. 다음과 같이 사용할 수 있습니다: 여러 프로토콜동일 포트에서로 통신할 수 있는 서버를 구축하거나, 다양한 서비스에 접근할 수 있습니다. restful http/https, h2/gRPC. bRPC에서 http/h2를 사용하는 것은 libcurl보다 훨씬 편리합니다. HTTP/h2+json을 사용하여 protobuf 기반 프로토콜에 접...
apache__incubator-dubbo_CVE-2021-30181_2-6-8
Проект Apache Dubbo Apache Dubbo — это мощный и удобный веб- и RPC-фреймворк. Он поддерживает несколько языковых реализаций, таких как Java, Go, Python, PHP, Erlang, Rust и Node.js/Web. Dubbo предоставляет решения для коммуникации, обнаружения сервисов, управления трафиком, наблюдаемости,...
EulerOS 2.0 SP12 : kata-containers (EulerOS-SA-2026-2594)
"According to the versions of the kata-containers package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input...
EulerOS 2.0 SP15 : kata-containers (EulerOS-SA-2026-2484)
"According to the versions of the kata-containers package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input...
PT-2026-40970
Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.81.0 Description A denial-of-service DoS issue exists in the gRPC Launcher "PublishLogs" endpoint. Certain unexpected input values are not handled gracefully, which can cause the server process to terminate while...
Linux Distros Unpatched Vulnerability : CVE-2026-33186
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2...
orpc 安全漏洞
orpc is an open-source RPC and OpenAPI integration framework developed by middleapi. Versions of oRPC prior to 1.13.6 contained security vulnerabilities. These vulnerabilities stemmed from prototype pollution in the RPC JSON deserializer of the @orpc/client package. This could allow unauthenticat...
EUVD-2018-6745
Malware in sbrugna...
EUVD-2024-2573
Malicious code in bioql PyPI...
EUVD-2025-27574
Malicious code in bioql PyPI...
EUVD-2024-0286
Malicious code in bioql PyPI...
CVE-2024-7804
A flaw was found in PyTorch. This vulnerability allows an attacker to execute arbitrary code remotely via a maliciously crafted serialized PythonUDF object. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security...
GHSA-4VMG-RW8F-92F9 Withdrawn Advisory: PyTorch deserialization vulnerability
Withdrawn Advisory This advisory has been withdrawn because it describes known functionality of PyTorch. This link is maintained to preserve external references. Original Description A deserialization vulnerability exists in the Pytorch RPC framework torch.distributed.rpc in pytorch/pytorch...
gRPC: sensitive information disclosure
A flaw was found in gRPC. This flaw allows a remote attacker to obtain sensitive information, caused by a flaw when the gRPC HTTP2 stack raised a header size exceeded error. By sending a specially crafted request, an attacker can obtain sensitive information, and use this information to launch...
AZL-47442 CVE-2024-7246 affecting package grpc for versions less than 1.62.3-1
It's possible for a gRPC client communicating with a HTTP/2 proxy to poison the HPACK table between the proxy and the backend such that other clients see failed requests. It's also possible to use this vulnerability to leak other clients HTTP header keys, but not values. This occurs because the...
Expected Behavior Violation
Overview Affected versions of this package are vulnerable to Expected Behavior Violation via the HPackParser function when the gRPC client is communicating with an HTTP/2 proxy, allowing the attacker to poison the HPACK table. By manipulating the header encoding and poisoning the HPACK table...
GHSA-F984-3WX8-GRP9 XXL-RPC Deserialization of Untrusted Data vulnerability
XXL-RPC is a high performance, distributed RPC framework. With it, a TCP server can be set up using the Netty framework and the Hessian serialization mechanism. When such a configuration is used, attackers may be able to connect to the server and provide malicious serialized objects that, once...
gRPC Security Vulnerabilities
gRPC is a modern, open-source, high-performance remote procedure call RPC framework from gRPC Open Source. A security vulnerability exists in gRPC versions prior to 1.10.9, 1.9.15, and 1.8.22, which stems from the ability to allocate memory far beyond the configuration limit for incoming messages...
