CVE-2023-32731High· 7.4▾ TwilightConnection confusion in gRPC
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 40.7 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
0.5%
Last analysed / modified upstream
When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame. This caused any HPACK table mutations to also be skipped, resulting in a desynchronization of HPACK tables between sender and receiver. If leveraged, say, between a proxy and a backend, this could lead to requests from the proxy being interpreted as containing headers from different proxy clients - leading to an information leak that can be used for privilege escalation or data exfiltration.
io.grpc:grpc-protobuf >= 1.53.0, < 1.53.1grpcio >= 1.53.0, < 1.53.1grpc >= 1.53.0, < 1.53.1grpcio >= 1.54.0, < 1.54.2grpc >= 1.54.0, < 1.54.2io.grpc:grpc-protobuf >= 1.54.0, < 1.54.2Upgrade to a patched release:
io.grpc:grpc-protobuf 1.53.1grpcio 1.53.1grpc 1.53.1grpcio 1.54.2grpc 1.54.2io.grpc:grpc-protobuf 1.54.2Connected by shared product, vendor, weakness, or advisory.
CVE-2023-32732Medium· 5.3gRPC connection termination issue
CVE-2023-1428High· 7.5gRPC Reachable Assertion issue
CVE-2026-84445High· 8.7gRPC-Go is the Go language implementation of gRPC
CVE-2026-84303MediumgRPC-Go is the Go language implementation of gRPC
CVE-2026-84304HighgRPC-Go is the Go language implementation of gRPC
GO-2026-6061NoneVulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc