CVE-2025-59789

Apache bRPC (versions prior to 1.15.0 ) is vulnerable to a stack overflow Denial of Service (DoS) due to uncontrolled recursion in the json2pb component. The root cause is that the underlying rapidjson parser uses a recursive method by default; providing deep recursive JSON data from an untrusted...

CVE-2023-45757

CVE-2023-45757 affects Apache bRPC 1.6.0 (e.g., 1.6.1), (2) apply the patch from PR #2411 if upgrading is difficult, or (3) disable the rpcz feature. If exploitation details or in-the-wild data are not present in the provided documents, those specifics are not stated here.

CVE-2025-54472

A Denial of Service (DoS) vulnerability exists in Apache bRPC (all versions