## Summary This fix upgrades to node 18.18.0 and grpc 1.58.0. ## Vulnerability Details ** CVEID: **[CVE-2023-4785]() ** DESCRIPTION: **Google gRPC is vulnerable to a denial of service, caused by a lac ...
Continue ReadingDecember 15, 2023
Lack of error handling in the TCP server in Google's gRPC starting ver ...Read More ...
Continue ReadingDecember 15, 2023
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12772 advisory. - Envoy is an open source edge and service proxy de ...
Continue ReadingDecember 15, 2023
Hi, Spring fans! Welcome to another installment of _This Week in Spring_ - **Java 21 edition**! The big news, indeed, the _biggest_ news, is that Java 21 is now available here! You should use [SDKMAN] ...
Continue ReadingDecember 15, 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.Read M ...
Continue ReadingDecember 15, 2023
Libraries that implement HTTP/2 are vulnerable to Denial Of Service (DoS). The vulnerability could be exploited by attackers via sending a large number of HTTP/2 requests to a vulnerable server, then ...
Continue ReadingDecember 15, 2023
Summary The grpc Unary Server Interceptor opentelemetry-go-contrib/instrumentation/google.golang.org/grpc/otelgrpc/interceptor.go // UnaryServerInterceptor returns a grpc.UnaryServerInterceptor suitab ...
Continue ReadingDecember 15, 2023
An Unchecked Return Value vulnerability in the user interfaces to the Juniper Networks Junos OS and Junos OS Evolved, the CLI, the XML API, the XML Management Protocol, the NETCONF Management Protocol ...
Continue ReadingDecember 15, 2023
Back to Main