Private tokens could appear in logs if context containing gRPC metadata is logged in google.golang.org/grpc

概要

参考情報

• grpc/grpc-go security advisory · ADVISORY
• grpc/grpc-go commit ab29241 · FIX

google.golang.org/grpc のその他の脆弱性

• CVE-2026-84445高 8.7gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/trans…
• CVE-2026-84304高 8.7gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame…
• CVE-2026-84303中 6.3gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, the xDS RBAC HTTP filter in internal/xds/httpfilter/rbac/rbac.go does no…
• GO-2026-6061Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc
• GHSA-hrxh-6v49-42gf高gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities