Known vulnerabilities in Apache bRPC

Vendor: Apache Foundation
Software: Apache bRPC
Software CPE: cpe:2.3:a:apache_foundation:brpc:*:*:*:*:*:*:*:*
Website: https://www.apache.org
Total vulnerabilities: 40
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache bRPC Apache bRPC is affected by 40 known vulnerabilities: 2 high, 36 medium, 2 low Critical High Medium Low

Vulnerabilities (40)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU157336 - Improper Authentication
CVE-2026-48830		 CWE-287 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157337 - Uncontrolled Recursion
CVE-2026-54425		 CWE-674 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157338 - Uncontrolled Recursion
CVE-2026-54426		 CWE-674 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157339 - Uncontrolled Recursion
CVE-2026-54427		 CWE-674 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157340 - Out-of-bounds read
CVE-2026-56386		 CWE-125 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157341 - Allocation of Resources Without Limits or Throttling
CVE-2026-56387		 CWE-770 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157342 - Out-of-bounds write
CVE-2026-56388		 CWE-787 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157343 - Allocation of Resources Without Limits or Throttling
CVE-2026-58064		 CWE-770 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157344 - Allocation of Resources Without Limits or Throttling
CVE-2026-61902		 CWE-770 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157345 - Out-of-bounds read
CVE-2026-61916		 CWE-125 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157346 - Improper Validation of Certificate with Host Mismatch
CVE-2026-66392		 CWE-297 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157347 - Integer underflow
CVE-2026-74755		 CWE-191 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157348 - Allocation of Resources Without Limits or Throttling
CVE-2026-74757		 CWE-770 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157349 - Use After Free
CVE-2026-74758		 CWE-416 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU157350 - Reachable Assertion
CVE-2026-78048		 CWE-617 Medium
No
No
 1.18.0 23.10.2026 SB2026102312
#VU121614 - Argument Injection or Modification
CVE-2025-60021		 CWE-88 Medium
Available
No
 1.15.0 16.01.2026 SB2025120446
#VU119156 - Uncontrolled Recursion
CVE-2025-59789		 CWE-674 Medium
No
No
 1.15.0 04.12.2025 SB2025120446
#VU86311 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-23452		 CWE-444 Medium
No
No
 1.8.0 09.02.2024 SB2024020946
#VU86310 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-45757		 CWE-79 Low
No
No
 1.6.1 09.02.2024 SB2024020945
#VU76046 - Permissions, Privileges, and Access Controls
CVE-2023-31039		 CWE-264 Low
No
No
 1.5.0 11.05.2023 SB2023051141


Showing elements 1 - 20 out of 40