Astra Linux – vulnerability in golang-google-grpc

gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 contain an authorization bypass vulnerability caused by improper input validation of the HTTP/2 :path pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the :path omitted the...