Improper Handling of Highly Compressed Data (Data Amplification)

Overview Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the gzip-decoding path in GrpcReadStreamBase used by GrpcServerRequestImpl. An attacker can send a small gzip-compressed gRPC request that expands beyond the configured...