elixir-grpc vulnerabilities

Streaming request body limit enforced only after an 8 MB read in elixir-grpc grpc_server

elixir-grpc · grpc_server

CPU exhaustion via a truncated gRPC message on streaming RPCs in elixir-grpc grpc_server

elixir-grpc · grpc_server

Path bindings ignored for gRPC Content-Types on transcoded routes in elixir-grpc grpc_server

elixir-grpc · grpc_server

Memory exhaustion via compressed Erlang terms in the elixir-grpc Erlpack codec

elixir-grpc · grpc

Refused calls drain the HTTP/2 connection flow-control window in elixir-grpc grpc_server

elixir-grpc · grpc_server

Unbounded request body accumulation on streaming RPCs causes memory exhaustion in grpc_server

elixir-grpc · grpc_server

Remote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpc

elixir-grpc · grpc

grpc gzip decompression bomb in GRPC.Compressor.Gzip.decompress/1

elixir-grpc · grpc

Authorization bypass via path binding override in elixir-grpc/grpc HTTP transcoding

elixir-grpc · grpc

Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc

elixir-grpc · grpc