Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

Maven package

io.vertx:vertx-grpc-server

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

1 actionable advisory, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. Medium, CVSS 6.9MavenPublished

    Vertx gRPC server does not limit the maximum message size

    CVE-2024-8391 · GHSA-g76f-gjfx-4rpr

    Affected
    • Maven io.vertx:vertx-grpc-server >= 4.3.0, < 4.5.10
    Fixed in
    4.5.10· Vendor fix available
    Issue
    In Eclipse Vert.x version 4.3.0 to 4.5.9, the gRPC server does not limit the maximum length of message payload (Maven GAV: io.vertx:vertx-grpc-server and io.vertx:vertx-grpc-client). This is fixed in the 4.5.10 version. Note this does not affect the Vert.x gRPC server based grpc-java and Netty libraries (Maven GAV: io.vertx:vertx-grpc)

    Recommended action: Upgrade to 4.5.10 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:github.comSource checked Evidence →