Priority LOW 35
Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc_server allows unauthenticated attackers to exhaust memory and crash the node via an oversized client-streaming or bidirectional-strea…
Vulnerabilities
5 records
TI-2026-36118 CVE-2026-48853 · GHSA-grp7-v8xh-rj7h
Remote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpc
Priority HIGH 81
Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc allow unauthenticated attackers to crash the BEAM node via atom table exhaustion and, when a…
TI-2026-38512 CVE-2026-53430 · GHSA-6ccx-9c9f-327w
grpc gzip decompression bomb in GRPC.Compressor.Gzip.decompress/1
Priority HIGH 77
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Message modules) allows a denial of service via a gzip decompression bomb.
TI-2026-35955 CVE-2026-48599 · GHSA-mwr4-5g34-j5cq
Authorization bypass via path binding override in elixir-grpc/grpc HTTP transcoding
Priority HIGH 68
Authorization Bypass Through User-Controlled Key vulnerability in elixir-grpc grpc allows authenticated attackers to access or modify resources belonging to other users by smuggling a conflicting value for any path-bound…
TI-2026-36119 CVE-2026-48854 · GHSA-q8gf-9rvj-gmgj
Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc
Priority HIGH 77
Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust the BEAM's memory and crash the server by streaming a large or slow-trickle unary request…