You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
gRPC contains a vulnerability CVE-2023-32732 #3038
gRPC contains a vulnerability whereby a client can cause a termination of connection between a HTTP2 proxy and a gRPC server: a base64 encoding error for -bin suffixed headers will result in a disconnection by the gRPC server, but is typically allowed by HTTP2 proxies. We recommend upgrading to v1.53.0 beyond the commit in grpc/grpc#32309
Activity
murgatroid99 commentedon Feb 6, 2026
I don't think grpc-js is impacted by this vulnerability. If you believe otherwise please provide more details.
DirkRichter commentedon Feb 9, 2026
Not sure. Our DependencyTrack races an CVE on v1.14.3:
Maybe this is a false positive? Can someone confirm?