gRPC server implementation for Elixir
Current section
5 Advisories
Jump to
Current section
5 Advisories
Streaming request body limit enforced only after an 8 MB read in elixir-grpc grpc_server
Affected Versions
References
- https://cna.erlef.org/cves/CVE-2026-124279.html
- https://github.com/elixir-grpc/grpc/commit/49e18c3ec6bb9afe2f712caad3dbab5c56a68a00
- https://github.com/elixir-grpc/grpc/commit/b1e771d558941b1ed4b6de8b39f6a5375543db01
- https://github.com/elixir-grpc/grpc/security/advisories/GHSA-736x-r87j-jhcm
- https://hex.pm/packages/grpc_server
CPU exhaustion via a truncated gRPC message on streaming RPCs in elixir-grpc grpc_server
Affected Versions
References
- https://cna.erlef.org/cves/CVE-2026-121809.html
- https://github.com/elixir-grpc/grpc/commit/0332faae5f5e132314794dbfdae5edecbccea292
- https://github.com/elixir-grpc/grpc/commit/38955f1392cbf08eef231a347348445410455c85
- https://github.com/elixir-grpc/grpc/commit/6d8a09ad919e208fb600538ac8b19bd733a04310
- https://github.com/elixir-grpc/grpc/security/advisories/GHSA-c2h9-f9cc-27xh
- https://hex.pm/packages/grpc
- https://hex.pm/packages/grpc_server
Path bindings ignored for gRPC Content-Types on transcoded routes in elixir-grpc grpc_server
Affected Versions
References
- https://cna.erlef.org/cves/CVE-2026-124278.html
- https://github.com/elixir-grpc/grpc/commit/0332faae5f5e132314794dbfdae5edecbccea292
- https://github.com/elixir-grpc/grpc/commit/8aaf3d3a8c4c7b08ac65e9c6f254e0d24da1d048
- https://github.com/elixir-grpc/grpc/commit/953ab980d8a127e895d3ab9505fc4b9337bb32f7
- https://github.com/elixir-grpc/grpc/security/advisories/GHSA-xc5v-89vq-hv5m
- https://hex.pm/packages/grpc
- https://hex.pm/packages/grpc_server
Refused calls drain the HTTP/2 connection flow-control window in elixir-grpc grpc_server
Affected Versions
References
- https://cna.erlef.org/cves/CVE-2026-123635.html
- https://github.com/elixir-grpc/grpc/commit/0332faae5f5e132314794dbfdae5edecbccea292
- https://github.com/elixir-grpc/grpc/commit/61a71948e6e7b95efb27d48e7084c764503cc802
- https://github.com/elixir-grpc/grpc/security/advisories/GHSA-7x9q-vvph-rjcr
- https://hex.pm/packages/grpc_server
Unbounded request body accumulation on streaming RPCs causes memory exhaustion in grpc_server
Affected Versions
References
- https://cna.erlef.org/cves/CVE-2026-71397.html
- https://github.com/elixir-grpc/grpc/commit/0b663ca53dbf0f36f7f67ff1d0026f4482a18915
- https://github.com/elixir-grpc/grpc/commit/49e18c3ec6bb9afe2f712caad3dbab5c56a68a00
- https://github.com/elixir-grpc/grpc/security/advisories/GHSA-vx6q-cr5q-945g
- https://hex.pm/packages/grpc_server
Checksum
Dependency Config
mix.exs
rebar.config
Gleam
erlang.mk
Package Details
this version
322
yesterday
1 073
last 7 days
17 778
all time
160 104
