{"uuid": "19c0f8cf-7517-48e8-b3dc-33aa9bb7843f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84304", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3muih6g74sa2j", "content": "CVE-2026-84304, high, in gRPC-Go: an unauthenticated caller can fragment a stream payload into millions of 1-byte HTTP/2 DATA frames and exhaust the heap. The advisory notes each fragment carries tracking overhead, so flow-control windows do not bound it. #dev", "creation_timestamp": "2026-09-01T22:17:30.331147Z"}