Elixir-Grpc · weakness class
Denial of Service
7 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.
- Memory exhaustion via compressed Erlang terms in the elixir-grpc Erlpack codec
- CPU exhaustion via a truncated gRPC message on streaming RPCs in elixir-grpc grpc_server
- Streaming request body limit enforced only after an 8 MB read in elixir-grpc grpc_server
- Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc
- grpc gzip decompression bomb in GRPC.Compressor.Gzip.decompress/1
- Unbounded request body accumulation on streaming RPCs causes memory exhaustion in grpc_server
- Refused calls drain the HTTP/2 connection flow-control window in elixir-grpc grpc_server
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.