grpc-node — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in grpc-node, with AI-generated Chinese analysis, references, and POCs.

Vendor: grpc

CVE ID	Title	CVSS	Severity	Published
CVE-2026-101916	@grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized CWE-295	7.4	High	2026-09-28
CVE-2026-101915	@grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messages CWE-550	3.7	Low	2026-09-28
CVE-2026-101914	@grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches CWE-187	6.5	Medium	2026-09-28
CVE-2026-48069	@grpc/grps-js: An incoming malformed compressed message can cause a client or server crash CWE-248	7.5	High	2026-07-14
CVE-2026-48068	@grpc/grps-js: A malformed request can cause a server crash CWE-248	7.5	High	2026-07-14
CVE-2024-37168	@grpc/grpc-js can allocate memory for incoming messages well above configured limits CWE-789	5.3	Medium	2024-06-10

All 6 known CVE vulnerabilities affecting grpc-node with full Chinese analysis, references, and POCs where available.