elixir-grpc grpc server vulnerabilities in 2026, newest first

By year: all 2026 2025 2024 2023 2022 2021

1. 8.2CVE-2026-1242792026-11-13

   Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc_server allows unauthenticated attackers to exhaust server memory via client-streaming or bidirectional-streaming requests. The streaming read clause of…

2. 8.2CVE-2026-1218092026-11-13

   Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in elixir-grpc grpc_server and grpc allows unauthenticated attackers to occupy a BEAM scheduler indefinitely via a client-streaming or bidirectional-streaming request who…

3. 7.6CVE-2026-1242782026-11-13

   Authorization Bypass Through User-Controlled Key vulnerability in elixir-grpc grpc_server and grpc allows an attacker to make a handler act on a resource other than the one named in the URL of an HTTP-transcoded route, via a request with a…

4. 6.3CVE-2026-1236352026-11-13

   Missing Release of Resource after Effective Lifetime vulnerability in elixir-grpc grpc_server allows a client to stall all later calls on a shared HTTP/2 connection via calls that the server refuses while their DATA frames are in flight. …

5. 8.2CVE-2026-71397EPSS 0.3%2026-11-06

   Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc_server allows unauthenticated attackers to exhaust memory and crash the node via an oversized client-streaming or bidirectional-streaming request body. …