For information on gRPC Security Policy and reporting potential security issues, please see gRPC CVE Process.
Repository navigation
Security: grpc/grpc-rust
Security
SECURITY.md
-
tonic server with accept_http1 enabled has no HTTP/1 header read timeout (slowloris DoS)GHSA-8vc9-m4jp-4mm9 published
Oct 29, 2026 by LucioFrancoModerate -
Remotely exploitable DoS in Tonic `v0.12.0<=v0.12.2`GHSA-4jwc-w2hc-78qv published
Oct 1, 2024 by LucioFrancoLow
Learn more about advisories related to grpc/grpc-rust in the GitHub Advisory Database