js · @grpc/grpc-jsCritical
@grpc/grpc-js: Invalid HTTP/2 stream initiation causes server crash
An invalid incoming HTTP/2 stream initiation can crash the server process.
What changed
An invalid incoming HTTP/2 stream initiation can crash the server process.
Who it affects
All servers created using @grpc/grpc-js.
What to do today
Update @grpc/grpc-js to one of the patched versions: 1.9.16, 1.10.12, 1.11.4, 1.12.7, 1.13.5, or 1.14.4.
The trail
Collected→
Audited→
Written→
Published