mostynb vulnerabilities

Products

• github.com/mostynb/go-grpc-compression 1

Latest mostynb CVEs

Newest publication first

1. GHSA-87m9-rv8p-rgmg go-grpc-compression has a zstd decompression bombing vulnerability

   Published 2024-06-10

   High·CVSS 7.5

   Impact A malicious user could cause a denial of service (DoS) when using a specially crafted gRPC request. The decompression mechanism for zstd did not respect the limits imposed by gRPC, allowing rapid memory usage increases. Versions v1.1.4 through to v1.2.2 made use of the Dec...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.