Vulnerabilities for grpcio

First version without a known vulnerability: 1.54.0rc1

Details

• GHSA-p25m-jpj4-qcrr2023-09-13

  Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)

  Fixed in: 1.56.2, 1.55.3, 1.54.3, 1.53.2

• GHSA-496j-2rq6-j6cc2023-08-09

  Excessive Iteration in gRPC

  Fixed in: 1.53.2, 1.54.3, 1.55.2, 1.56.2

• GHSA-6628-q6j9-w8vg2023-07-06

  gRPC Reachable Assertion issue

  Fixed in: 1.53.0

• GHSA-9hxf-ppjv-w6rq2023-07-06

  gRPC connection termination issue

  Fixed in: 1.53.1, 1.54.2

• GHSA-cfgp-2977-2fmm2023-07-05

  Connection confusion in gRPC

  Fixed in: 1.53.1, 1.54.2

• PYSEC-2017-1012017-04-30

  Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc_call_destroy function in core/lib/surface/call.c.

  Fixed in: 6544a2d5d9ecdb64214da1d228886a7d15bbf5c7, 1.3.0