js · @grpc/grpc-jsCritical
@grpc/grpc-js crash on invalid compressed message
An invalid incoming compressed message can cause a crash in @grpc/grpc-js clients and servers.
What changed
An invalid incoming compressed message can cause a crash in @grpc/grpc-js clients and servers.
Who it affects
All clients and servers using @grpc/grpc-js.
What to do today
Upgrade to a patched version: 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, or 1.14.4.
The trail
Collected→
Audited→
Written→
Published