https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T12:11:54.464234+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-48069 CVE-2026-48069 — @grpc/grps-js: An incoming malformed compressed message can cause a client or server crash 2026-10-02T12:11:55.409478+00:00

Affected: grpc-node

@grpc/grps-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, and 1.14.4, an invalid incoming compressed message can cause a client or server process that uses @grpc/grpc-js to crash. This issue is fixed in versions 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, and 1.14.4.