brpc

中文版 bRPC は、C++言語を使用した産業グレードのRPCフレームワークであり、検索、ストレージ、機械学習、広告、レコメンデーションなどの高性能システムでよく使用されています。 "bRPC" は "better RPC" を意味します。 以下の用途に使用できます： 複数のプロトコル（同一ポート上 ）で通信可能なサーバーを構築するか、あらゆる種類のサービスにアクセスします restful...

apache__incubator-dubbo_CVE-2021-30181_2-6-8

Apache Dubbo 项目 Apache Dubbo 是一个强大且易用的 Web 和 RPC 框架。它支持多种语言实现，例如 Java、Go、Python、PHP、Erlang、Rust 和 Node.js/Web。 Dubbo 为构建企业级微服务提供通信、服务发现、流量管理、可观测性、安全性、工具化及最佳实践等解决方案。 🚀 我们正在收集用户信息以改进 Dubbo。请在此处帮助我们：谁在使用 Dubbo 🧱 架构 消费者与提供者之间的通信通过 RPC 协议（如 Triple、TCP、REST 等）完成。 消费者从注册中心（例如...

EulerOS 2.0 SP12 : kata-containers (EulerOS-SA-2026-2594)

"According to the versions of the kata-containers package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input...

EulerOS 2.0 SP15 : kata-containers (EulerOS-SA-2026-2484)

"According to the versions of the kata-containers package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input...

PT-2026-40970

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.81.0 Description A denial-of-service DoS issue exists in the gRPC Launcher "PublishLogs" endpoint. Certain unexpected input values are not handled gracefully, which can cause the server process to terminate while...

Linux Distros Unpatched Vulnerability : CVE-2026-33186

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2...

orpc 安全漏洞

orpc is an open-source RPC and OpenAPI integration framework developed by middleapi. Versions of oRPC prior to 1.13.6 contained security vulnerabilities. These vulnerabilities stemmed from prototype pollution in the RPC JSON deserializer of the @orpc/client package. This could allow unauthenticat...

The vulnerability in the built-in heap profiler service of the Apache bRPC RPC framework allows a perpetrator to execute arbitrary commands.

The vulnerability of the built-in heap profiler RPC framework of Apache bRPC is related to the lack of measures taken to clean up data at the management level when processing the extraoptions parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

EUVD-2018-6745

Malware in sbrugna...

EUVD-2025-27574

Malicious code in bioql PyPI...

EUVD-2024-2573

Malicious code in bioql PyPI...

EUVD-2024-0286

Malicious code in bioql PyPI...

CVE-2024-7804

A flaw was found in PyTorch. This vulnerability allows an attacker to execute arbitrary code remotely via a maliciously crafted serialized PythonUDF object. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security...

GHSA-4VMG-RW8F-92F9 Withdrawn Advisory: PyTorch deserialization vulnerability

Withdrawn Advisory This advisory has been withdrawn because it describes known functionality of PyTorch. This link is maintained to preserve external references. Original Description A deserialization vulnerability exists in the Pytorch RPC framework torch.distributed.rpc in pytorch/pytorch...

CVE-2024-7804

...

gRPC: sensitive information disclosure

A flaw was found in gRPC. This flaw allows a remote attacker to obtain sensitive information, caused by a flaw when the gRPC HTTP2 stack raised a header size exceeded error. By sending a specially crafted request, an attacker can obtain sensitive information, and use this information to launch...

AZL-47442 CVE-2024-7246 affecting package grpc for versions less than 1.62.3-1

It's possible for a gRPC client communicating with a HTTP/2 proxy to poison the HPACK table between the proxy and the backend such that other clients see failed requests. It's also possible to use this vulnerability to leak other clients HTTP header keys, but not values. This occurs because the...

Expected Behavior Violation

Overview Affected versions of this package are vulnerable to Expected Behavior Violation via the HPackParser function when the gRPC client is communicating with an HTTP/2 proxy, allowing the attacker to poison the HPACK table. By manipulating the header encoding and poisoning the HPACK table...

GHSA-F984-3WX8-GRP9 XXL-RPC Deserialization of Untrusted Data vulnerability

XXL-RPC is a high performance, distributed RPC framework. With it, a TCP server can be set up using the Netty framework and the Hessian serialization mechanism. When such a configuration is used, attackers may be able to connect to the server and provide malicious serialized objects that, once...

gRPC Security Vulnerabilities

gRPC is a modern, open-source, high-performance remote procedure call RPC framework from gRPC Open Source. A security vulnerability exists in gRPC versions prior to 1.10.9, 1.9.15, and 1.8.22, which stems from the ability to allocate memory far beyond the configuration limit for incoming messages...