Linuxfoundation Grpc Swift — known CVE vulnerabilities

Every CVE whose affected-product data names Linuxfoundation Grpc Swift, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2021-36153 — CVSS 7.5 (high): Mismanaged state in GRPCWebToHTTP2ServerCodec.swift in gRPC Swift 1.1.0 and 1.1.1 allows remote attackers to deny service by sending…
• CVE-2021-36154 — CVSS 7.5 (high): HTTP2ToRawGRPCServerCodec in gRPC Swift 1.1.1 and earlier allows remote attackers to deny service via the delivery of many small messages…
• CVE-2021-36155 — CVSS 7.5 (high): LengthPrefixedMessageReader in gRPC Swift 1.1.0 and earlier allocates buffers of arbitrary length, which allows remote attackers to cause…
• CVE-2022-24777 — CVSS 7.5 (high): grpc-swift is the Swift language implementation of gRPC, a remote procedure call (RPC) framework. Prior to version 1.7.2, a grpc-swift…