CVE-2025-59789: Critical Flaw in Apache bRPC Framework Exposes High-Performance Systems to Crash Risks

A critical vulnerability (CVE-2025-59789) has been discovered in Apache bRPC, an RPC framework used in high-performance systems. This flaw allows remote attackers to crash servers by exploiting a stack exhaustion issue due to unbounded recursion in JSON data parsing. The vulnerability affects versions prior to 1.15.0 and is particularly dangerous for organizations handling external traffic. A fix has been released, introducing a recursion depth limit of 100, which may impact legitimate requests with deeply nested structures. Administrators are advised to upgrade to version 1.15.0 to mitigate the risk.