VDB

GO-2024-2911

GO-2024-2911 PUBLISHED

go-grpc-compression has a zstd decompression bombing vulnerability in github.com/mostynb/go-grpc-compression

Affected Products

VendorProductVersions
github.commostynb/go-grpc-compression1.1.4, 1.1.4, 1.1.4

Timeline

  • Jun 14, 2024 CVE Published
  • Feb 4, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›