| CVE-2026-61916 |
Out-of-bounds reads in URL parsing and case-insensitive header lookup in Apache bRPC before version 1.18.0 on…
|
Not rated
|
Oct 21, 2026 |
| CVE-2026-61902 |
Apache bRPC versions before 1.18.0 do not consistently enforce the configured max_body_size limit in non-progressive…
|
Not rated
|
Oct 21, 2026 |
| CVE-2026-58064 |
The Redis protocol implementation in Apache bRPC allowed inline command parsing to allocate and copy the full connection…
|
Not rated
|
Oct 21, 2026 |
| CVE-2026-56388 |
The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header
|
Not rated
|
Oct 21, 2026 |
| CVE-2026-56387 |
The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts directly from untrusted input
|
Not rated
|
Oct 21, 2026 |
| CVE-2026-56386 |
Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allows an unauthenticated…
|
Not rated
|
Oct 21, 2026 |
| CVE-2026-54427 |
Uncontrolled recursion in the AMF parser in Apache bRPC < 1.18.0 allows a remote RTMP peer to crash a bRPC process by…
|
Not rated
|
Oct 21, 2026 |
| CVE-2026-54426 |
Uncontrolled recursion in the Redis reply parser in Apache bRPC < 1.18.0 allows a remote Redis server peer to crash a…
|
Not rated
|
Oct 21, 2026 |
| CVE-2026-54425 |
Uncontrolled recursion in the HTTP/2 HPACK decoder in Apache bRPC before 1.18.0 allows remote attackers to cause…
|
Not rated
|
Oct 21, 2026 |
| CVE-2026-48830 |
Improper authentication in Apache bRPC through 1.17.0 allows a remote unauthenticated attacker to bypass…
|
Not rated
|
Oct 21, 2026 |
| CVE-2025-60021 |
Remote command injection vulnerability in heap profiler builtin service in Apache bRPC ((all versions < 1.15.0)) on…
|
Not rated
|
Jan 16, 2026 |
| CVE-2025-59789 |
Uncontrolled recursion in the json2pb component in Apache bRPC (version < 1.15.0) on all platforms allows remote…
|
Not rated
|
Dec 1, 2025 |
| CVE-2025-54472 |
Unlimited memory allocation in redis protocol parser in Apache bRPC (all versions < 1.14.1) on all platforms allows…
|
Not rated
|
Aug 14, 2025 |
| CVE-2024-23452 |
Request smuggling vulnerability in HTTP server in Apache bRPC 0.9.5~1.7.0 on all platforms allows attacker to smuggle…
|
Not rated
|
Feb 8, 2024 |
| CVE-2023-45757 |
Security vulnerability in Apache…
|
Not rated
|
Oct 16, 2023 |
| CVE-2023-31039 |
Security vulnerability in Apache…
|
Not rated
|
May 8, 2023 |