Known vulnerabilities in grpcurl
Vendor:
Fedoraproject
Software:
grpcurl
Software CPE:
cpe:2.3:o:fedoraproject:grpcurl:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
10
Public exploits:
1
Known exploited (KEV):
0
Breakdown by Severity Chart
Vulnerabilities (10)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140620 - Resource exhaustion CVE-2026-27145 |
CWE-400 | Medium | 1.9.4-1.fc43, 1.9.4-1.fc44, 1.9.4-1.fc45 | 31.07.2026 |
SB2026073127 SB2026073129 SB2026073130 and 45 more |
||
| #VU106253 - Improper input validation CVE-2025-22870 |
CWE-20 | Medium | 1.9.3-1.fc43 | 30.03.2025 |
SB2025033001 SB2025033002 SB2025033003 and 106 more |
||
| #VU105461 - Resource exhaustion CVE-2025-22868 |
CWE-400 | Medium | 1.9.3-1.fc43 | 10.03.2025 |
SB2025031013 SB2025031015 SB2025031076 and 89 more |
||
| #VU66447 - Overly Permissive Cross-domain Whitelist CVE-2022-1996 |
CWE-942 | Low | 1.8.6-3.fc35, 1.8.6-3.fc36, 1.8.6-3.fc37 | 12.08.2022 |
SB2022081216 SB2022081228 SB2022081229 and 65 more |
||
| #VU66122 - Use of Insufficiently Random Values CVE-2022-30629 |
CWE-330 | Medium | 1.8.6-3.fc36, 1.8.6-3.fc37 | 05.08.2022 |
SB2022080501 SB2022080503 SB2022081106 and 81 more |
||
| #VU64269 - Integer overflow CVE-2022-28327 |
CWE-190 | Low | 1.8.6-3.fc35, 1.8.6-3.fc36, 1.8.6-3.fc37 | 14.06.2022 |
SB2022041004 SB2022061422 SB2022061506 and 90 more |
||
| #VU64266 - Buffer overflow CVE-2022-24675 |
CWE-120 | Low | 1.8.6-3.fc35, 1.8.6-3.fc36, 1.8.6-3.fc37 | 14.06.2022 |
SB2022041004 SB2022061422 SB2022061511 and 88 more |
||
| #VU63173 - Permissions, Privileges, and Access Controls CVE-2022-29526 |
CWE-264 | Low | 1.8.6-3.fc35, 1.8.6-3.fc36, 1.8.6-3.fc37 | 14.05.2022 |
SB2022051403 SB2022051404 SB2022062928 and 65 more |
||
| #VU62039 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-27191 |
CWE-327 | Medium | 1.8.6-2.fc34, 1.8.6-2.fc35, 1.8.6-2.fc36, 1.8.6-2.fc37, 1.8.6-3.fc36, 1.8.6-3.fc37 | 10.04.2022 |
SB2022041004 SB2022041406 SB2022081226 and 91 more |
||
| #VU61599 - Improper input validation CVE-2022-21698 |
CWE-20 | Medium | 1.8.6-3.fc35, 1.8.6-3.fc36 | 24.03.2022 |
SB2022021530 SB2022032413 SB2022040807 and 110 more |