VulnSea

@grpc/grpc-js-xds vulnerabilities

CVEs whose affected-version data names the @grpc/grpc-js-xds package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-101914Medium· 6.5
today

@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon

@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.1 and 1.14.1, the exact path (method name) matcher used by RBAC performs a prefix comparison instead of an equality comparis…

▾ Sunlitgrpc · @grpc/grpc-js-xdsvia NVD
@grpc/grpc-js-xds vulnerabilities (CVEs) · VulnSea