https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-33186.htmlhttps://patchthecve.com/cve/CVE-2026-33186.htmlFri, 18 Sep 2026 13:17:50 +0000CRITICAL 9.1: gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory lhttps://patchthecve.com/cve/CVE-2024-11407.htmlhttps://patchthecve.com/cve/CVE-2024-11407.htmlWed, 17 Jun 2026 06:57:42 +0000HIGH 7.5: There exists a denial of service through Data corruption in gRPC-C++ - gRPC-C++ servers with transmit zero copy enabled through the channel arg GRPC_ARG_TCP_TX_ZEROCOPY_ENABLED can experience data corruption issues. The data sent by the application may be corrupted before transmission over the netwohttps://patchthecve.com/cve/CVE-2024-7246.htmlhttps://patchthecve.com/cve/CVE-2024-7246.htmlWed, 17 Jun 2026 08:19:41 +0000MEDIUM 5.3: It's possible for a gRPC client communicating with a HTTP/2 proxy to poison the HPACK table between the proxy and the backend such that other clients see failed requests. It's also possible to use this vulnerability to leak other clients HTTP header keys, but not values. This occurs because the err