https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 18:13:57 +0000 https://vulnerability.circl.lu/vuln/cve-2024-7246 <p><strong>Affected:</strong> Google gRPC</p> <p>It&#39;s possible for a gRPC client communicating with a HTTP/2 proxy to poison the HPACK table between the proxy and the backend such that other clients see failed requests. It&#39;s also possible to use this vulnerability to leak other clients HTTP header keys, but not values.</p> <p>This occurs because the error status for a misencoded header is not cleared between header reads, resulting in subsequent (incrementally indexed) added headers in the first request being poisoned until cleared from the HPACK table.</p> <p>Please update to a fixed version of gRPC as soon as possible. This bug has been fixed in 1.58.3, 1.59.5, 1.60.2, 1.61.3, 1.62.3, 1.63.2, 1.64.3, 1.65.4.</p> <p><strong>Affected:</strong> Google gRPC</p> <p>It&#39;s possible for a gRPC client communicating with a HTTP/2 proxy to poison the HPACK table between the proxy and the backend such that other clients see failed requests. It&#39;s also possible to use this vulnerability to leak other clients HTTP header keys, but not values.</p> <p>This occurs because the error status for a misencoded header is not cleared between header reads, resulting in subsequent (incrementally indexed) added headers in the first request being poisoned until cleared from the HPACK table.</p> <p>Please update to a fixed version of gRPC as soon as possible. This bug has been fixed in 1.58.3, 1.59.5, 1.60.2, 1.61.3, 1.62.3, 1.63.2, 1.64.3, 1.65.4.</p> https://vulnerability.circl.lu/vuln/cve-2024-7246