GHSA-GRP7-V8XH-RJ7H gRPC Erlang package vulnerable to Remote Code Execution with attacker-controlled gRPC payloads

Summary GRPC.Codec.Erlpack.decode/2 calls :erlang.binarytoterm/1 directly on the raw gRPC message body without the :safe option. Any unauthenticated peer that can reach a gRPC endpoint with Content-Type: application/grpc+erlpack can crash the entire BEAM node via atom table exhaustion or, if a...