grpc (Hex)
Advisories
8
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 1.0.0 or later clears every advisory below that has a fix.
Upgrade commands
mix
{:grpc, "~> 1.0.0"} # then: mix deps.update grpcKnown vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| EEF-CVE-2026-48853 Remote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpc |
Critical EPSS 0.78% |
>= 0.4.0, < 1.0.0 | 1.0.0 |
| EEF-CVE-2026-48853 Remote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpc |
Critical EPSS 0.78% |
>= 0.4.0, < 1.0.0 | 1.0.0 |
| EEF-CVE-2026-53430 grpc gzip decompression bomb in GRPC.Compressor.Gzip.decompress/1 |
High EPSS 0.43% |
>= 0.4.0, < 1.0.0 | 1.0.0 |
| EEF-CVE-2026-53430 grpc gzip decompression bomb in GRPC.Compressor.Gzip.decompress/1 |
High EPSS 0.43% |
>= 0.4.0, < 1.0.0 | 1.0.0 |
| EEF-CVE-2026-48599 Authorization bypass via path binding override in elixir-grpc/grpc HTTP transcoding |
High EPSS 0.34% |
>= 0.8.0, < 1.0.0 | 1.0.0 |
| EEF-CVE-2026-48599 Authorization bypass via path binding override in elixir-grpc/grpc HTTP transcoding |
High EPSS 0.34% |
>= 0.8.0, < 1.0.0 | 1.0.0 |
| EEF-CVE-2026-48854 Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc |
High EPSS 0.45% |
>= 0.3.1, < 1.0.0 | 1.0.0 |
| EEF-CVE-2026-48854 Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc |
High EPSS 0.45% |
>= 0.3.0-alpha.2, < 1.0.0 | 1.0.0 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor