https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 12:57:27 +0000 https://vulnerability.circl.lu/vuln/ghsa-m425-mq94-257g <p><strong>Affected:</strong> Go: google.golang.org/grpc</p> <p>### Impact In affected releases of gRPC-Go, it is possible for an attacker to send HTTP/2 requests, cancel them, and send subsequent requests, which is valid by the HTTP/2 protocol, but would cause the gRPC-Go server to launch more concurrent method handlers than the configured maximum stream limit.</p> <p>### Patches This vulnerability was addressed by #6703 and has been included in patch releases: 1.56.3, 1.57.1, 1.58.3. It is also included in the latest release, 1.59.0.</p> <p>Along with applying the patch, users should also ensure they are using the `grpc.MaxConcurrentStreams` server option to apply a limit to the server&#39;s resources used for any single connection.</p> <p>### Workarounds None.</p> <p>### References #6703</p> <p><strong>Affected:</strong> Go: google.golang.org/grpc</p> <p>### Impact In affected releases of gRPC-Go, it is possible for an attacker to send HTTP/2 requests, cancel them, and send subsequent requests, which is valid by the HTTP/2 protocol, but would cause the gRPC-Go server to launch more concurrent method handlers than the configured maximum stream limit.</p> <p>### Patches This vulnerability was addressed by #6703 and has been included in patch releases: 1.56.3, 1.57.1, 1.58.3. It is also included in the latest release, 1.59.0.</p> <p>Along with applying the patch, users should also ensure they are using the `grpc.MaxConcurrentStreams` server option to apply a limit to the server&#39;s resources used for any single connection.</p> <p>### Workarounds None.</p> <p>### References #6703</p> https://vulnerability.circl.lu/vuln/ghsa-m425-mq94-257g