Apache · product
Apache bRPC
41 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- check available
- 1
Every one of the 41 is a mark on the map. Named now: 1 to 26, most at risk first.
- Apache bRPC Heap Profiler - Remote Command Injection
- Apache bRPC: Stack Exhaustion via Unbounded Recursion in JSON Parser
- Apache bRPC: HTTP request smuggling vulnerability
- Apache bRPC: ServerOptions.pid_file may cause arbitrary code execution
- Apache bRPC: Redis Parser Remote Denial of Service
- Apache bRPC: The builtin service rpcz page has an XSS attack vulnerability
- Apache bRPC: Out-of-Bounds Write in Redis Command Parser
- Apache bRPC: Unbounded Resource Consumption and Crash in the HTTP/2 Receive Path
- Apache bRPC: Uncontrolled Resource Consumption via Excessive Streams in a Single RPC Request
- Apache bRPC: Integer Underflow and Out-of-Bounds Read in HTTP/2 DATA Frame Parser
- Apache bRPC: Missing Authentication for Streaming RPC Frames
- Apache bRPC: Stack Exhaustion via Recursive HPACK Dynamic Table Size Update Decoding
- Apache bRPC: Heap Use-After-Free in RTMP Abort Message Handling
- Apache bRPC: Remote Denial of Service via Out-of-Bounds Dynamic Table Sizing in HPACK Decoder
- Apache bRPC: Uncontrolled Memory Allocation via Malicious mcpack Array Item Count
- Apache bRPC: Remote Memory Exhaustion in RTMP AMF Parser
- Apache bRPC: Unbounded Memory Accumulation in Stream Message Reassembly
- Apache bRPC: Integer Underflow in mcpack2pb Parser Leading to Denial of Service
- Apache bRPC: Out-of-bounds Read in URL and Header Lookup Tables on Unsigned-char Platforms
- Apache bRPC: Denial of Service via Unbounded Redis Inline Command Allocation
- Apache bRPC: Authentication bypass when a server sets ServerOptions.internal_port and ServerOptions.auth
- Apache bRPC: HTTP builtin request can mark a connection authenticated and bypass auth for later requests
- Apache bRPC: Arbitrary file creation/truncation via /flags and unbounded profiling duration via /pprof
- Apache bRPC: HTTP Request Smuggling and Header Injection via Lenient HTTP/1.1 Header Parsing
- Apache bRPC: Stack Exhaustion via Unbounded Recursion in mcpack2pb Parser
- Apache bRPC: Out-of-bounds Read in Multi-stream RPC Response Handling
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP