Known vulnerabilities in Spring gRPC
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-40969 | The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the… | 3.7 Low | Apr 28, 2026 |
| CVE-2026-40968 | When an authenticated user is denied access to a gRPC method, their authenticated identity remains bound to the gRPC… | 4.3 Medium | Apr 28, 2026 |