https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T01:07:03.805831+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-48068 CVE-2026-48068 — @grpc/grps-js: A malformed request can cause a server crash 2026-10-05T01:07:03.823368+00:00

Affected: grpc-node

@grpc/grps-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, and 1.14.4, an invalid incoming HTTP/2 stream initiation can cause a server process created using @grpc/grpc-js to crash. This issue is fixed in versions 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, and 1.14.4.