Technologyglobal✓ verified · 90%

@grpc/grpc-js: A malformed request can cause a server crash

Name: @grpc/grpc-js: A malformed request can cause a server crash
Start: 2026-06-11T13:27:54Z
Location: Global (internet)

When: 2026-06-11 13:27 UTC
Where: Global (internet)
Category: cyber_advisory · npm

### Impact An invalid incoming HTTP/2 stream initiation can cause a server process to crash. This affects all servers created using @grpc/grpc-js. ### Patches The following version have fixes for this vulnerability: - 1.9.16 - 1.10.12 - 1.11.4 - 1.12.7 - 1.13.5 - 1.14.4 ### Workarounds There is no workaround.

Sources

GitHub Advisory Database ↗ · first seen 2026-06-11 13:27 UTC

Defaxon links out to the original reporting and never republishes article text.

Correlated events

Computed by the Defaxon correlation engine — linked by shared actors, co-location, and temporal proximity. Scored hypotheses, never causal claims.

No correlated events found in the current window. As more events arrive, connections form automatically.

← Back to the live map