DEBIAN-CVE-2023-32732

gRPC contains a vulnerability whereby a client can cause a termination of connection between a HTTP2 proxy and a gRPC server: a base64 encoding error for -bin suffixed headers will result in a disconnection by the gRPC server, but is typically allowed by HTTP2 proxies. We recommend upgrading beyo...

PT-2023-4872

Name of the Vulnerable Software and Affected Versions gRPC affected versions not specified Description The issue is related to a base64 encoding error for -bin suffixed headers, which can cause a disconnection by the gRPC server, but is typically allowed by HTTP2 proxies. This can be exploited by...

com.enegate:micronaut-grpc-server (0.0.3), io.micronaut.configuration:micronaut-aws-common (1.0.3) +47 more potentially affected by CVE-2022-21700 via io.micronaut:micronaut-http (1.0.3)

io.micronaut:micronaut-http MAVEN version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http and may be impacted: - com.enegate:micronaut-grpc-server 0.0.3 - io.micronaut.configuration:micronaut-aws-common 1.0.3 -...

Stripe: Local applications from user's computer can listen for webhooks via insecure gRPC server from stripe-cli

The stripe daemon command from the stripe-cli exposes a local gRPC server that does not require authentication and allows any local application to execute remote procedures. One of the procedures is Listen, which is an equivalent to stripe listen command and receives all webhooks for the user's...