CVE catalog

CVE-2026-33186

gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go serve

[CVE catalog]

Severity
Critical · CVSS 9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
1.58% · Oct 25, 2026

gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official `grpc/authz` package) evaluated the raw, non-canonical path string. Consequently, "deny" rules defined using canonical paths (starting with `/`) failed to match the incoming request, allowing it to bypass the policy if a fallback "allow" rule was present. This affects gRPC-Go servers that use path-based authorization interceptors, such as the official RBAC implementation in `google.golang.org/grpc/authz` or custom interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`; AND that have a security policy contains specific "deny" rules for canonical paths but allows other requests by default (a fallback "allow" rule). The vulnerability is exploitable by an attacker who can send raw HTTP/2 frames with malformed `:path` headers directly to the gRPC server. The fix in version 1.79.3 ensures that any request with a `:path` that does not start with a leading slash is immediately rejected with a `codes.Unimplemented` error, preventing it from reaching authorization interceptors or handlers with a non-canonical path string. While upgrading is the most secure and recommended path, users can mitigate the vulnerability using one of the following methods: Use a validating interceptor (recommended mitigation); infrastructure-level normalization; and/or policy hardening.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiangolang-google-grpcsid1.81.1-1fixed
Debiangolang-google-grpcforky1.81.1-1fixed
Debiangolang-google-grpctrixie1.64.0-7vulnerable
Debiangolang-google-grpcbookworm1.33.3-2vulnerable
Gogoogle.golang.org/grpcNot reported1.79.3fixed
Cpegolang-google-grpcNot reportedNot reportedvulnerable
Gogoogle.golang.org/grpcNot reported1.79.3fixed
CpegrpcNot reported1.79.3fixed
Susedocker-stablelinux enterprise server 12 sp5-ltss24.0.9_ce-1.40.1fixed
Susedocker-stablelinux enterprise server ltss extended security 12 sp524.0.9_ce-1.40.1fixed
Susedocker-stablelinux enterprise module for containers 15 sp724.0.9_ce-150000.1.48.1fixed
Susedocker-stablelinux enterprise high performance computing 15 sp4-espos24.0.9_ce-150000.1.48.1fixed
Susedocker-stablelinux enterprise high performance computing 15 sp4-ltss24.0.9_ce-150000.1.48.1fixed
Susedocker-stablelinux enterprise high performance computing 15 sp5-espos24.0.9_ce-150000.1.48.1fixed
Susedocker-stablelinux enterprise high performance computing 15 sp5-ltss24.0.9_ce-150000.1.48.1fixed
Susedocker-stablelinux enterprise server 15 sp4-ltss24.0.9_ce-150000.1.48.1fixed
Susedocker-stablelinux enterprise server 15 sp5-ltss24.0.9_ce-150000.1.48.1fixed
Susedocker-stablelinux enterprise server 15 sp6-ltss24.0.9_ce-150000.1.48.1fixed
Susedocker-stablelinux enterprise server for sap applications 15 sp424.0.9_ce-150000.1.48.1fixed
Susedocker-stablelinux enterprise server for sap applications 15 sp524.0.9_ce-150000.1.48.1fixed
Susedocker-stablelinux enterprise server for sap applications 15 sp624.0.9_ce-150000.1.48.1fixed
Opensusepvetuitumbleweed1.4.3-1.1fixed
Susegoogle-guest-agentlinux micro 6.020260903.01-2.1fixed
Susegoogle-guest-agentlinux micro 6.120260903.01-slfo.1.1_2.1fixed
Susegoogle-guest-agentlinux enterprise module for public cloud 1220260903.01-1.75.1fixed
Susegoogle-guest-agentlinux enterprise micro 5.520260903.01-150000.1.85.1fixed
Susegoogle-guest-agentlinux enterprise module for public cloud 15 sp420260903.01-150000.1.85.1fixed
Susegoogle-guest-agentlinux enterprise module for public cloud 15 sp520260903.01-150000.1.85.1fixed
Susegoogle-guest-agentlinux enterprise module for public cloud 15 sp620260903.01-150000.1.85.1fixed
Susegoogle-guest-agentlinux enterprise module for public cloud 15 sp720260903.01-150000.1.85.1fixed
Susedistributionlinux enterprise module for containers 15 sp73.1.1-150400.9.41.1fixed
Susedistributionlinux enterprise high performance computing 15 sp4-espos3.1.1-150400.9.41.1fixed
Susedistributionlinux enterprise high performance computing 15 sp4-ltss3.1.1-150400.9.41.1fixed
Susedistributionlinux enterprise high performance computing 15 sp5-espos3.1.1-150400.9.41.1fixed
Susedistributionlinux enterprise high performance computing 15 sp5-ltss3.1.1-150400.9.41.1fixed
Susedistributionlinux enterprise server 15 sp4-ltss3.1.1-150400.9.41.1fixed
Susedistributionlinux enterprise server 15 sp5-ltss3.1.1-150400.9.41.1fixed
Susedistributionlinux enterprise server 15 sp6-ltss3.1.1-150400.9.41.1fixed
Susedistributionlinux enterprise server for sap applications 15 sp43.1.1-150400.9.41.1fixed
Susedistributionlinux enterprise server for sap applications 15 sp53.1.1-150400.9.41.1fixed
Susedistributionlinux enterprise server for sap applications 15 sp63.1.1-150400.9.41.1fixed
Opensusecf-clitumbleweed8.18.4+git.0.3fcd823a1-1.1fixed
Opensusetraefik2tumbleweed2.11.53-1.1fixed
Opensusetraefiktumbleweed3.7.9-1.1fixed
Susegoogle-guest-agentlinux micro 6.120260529.00-slfo.1.1_1.1fixed
Susegoogle-guest-agentlinux micro 6.020260529.00-1.1fixed
Opensusedocker-stableleap 16.024.0.9_ce-160000.6.1fixed
Susegoogle-guest-agentlinux enterprise server 16.020260529.00-160000.1.1fixed
Susegoogle-guest-agentlinux enterprise server for sap applications 16.020260529.00-160000.1.1fixed
Susegoogle-cloud-sap-agentlinux enterprise server 16.03.15-160000.1.1fixed
Susegoogle-cloud-sap-agentlinux enterprise server for sap applications 16.03.15-160000.1.1fixed
Opensusegoogle-guest-agentleap 16.020260529.00-160000.1.1fixed
Opensusegoogle-cloud-sap-agentleap 16.03.15-160000.1.1fixed
Opensuseskopeotumbleweed1.23.0-1.1fixed
Susegoogle-osconfig-agentlinux enterprise module for public cloud 1220260615.01-1.47.1fixed
Susecontainerdlinux enterprise micro 5.31.7.29-150000.137.1fixed
Susecontainerdlinux enterprise micro 5.41.7.29-150000.137.1fixed
Susecontainerdlinux enterprise micro 5.51.7.29-150000.137.1fixed
Susecontainerdlinux enterprise module for basesystem 15 sp71.7.29-150000.137.1fixed
Susecontainerdlinux enterprise module for containers 15 sp71.7.29-150000.137.1fixed
Susecontainerdlinux enterprise high performance computing 15 sp4-espos1.7.29-150000.137.1fixed
Susecontainerdlinux enterprise high performance computing 15 sp4-ltss1.7.29-150000.137.1fixed
Susecontainerdlinux enterprise high performance computing 15 sp5-espos1.7.29-150000.137.1fixed
Susecontainerdlinux enterprise high performance computing 15 sp5-ltss1.7.29-150000.137.1fixed
Susecontainerdlinux enterprise server 15 sp4-ltss1.7.29-150000.137.1fixed
Susecontainerdlinux enterprise server 15 sp5-ltss1.7.29-150000.137.1fixed
Susecontainerdlinux enterprise server 15 sp6-ltss1.7.29-150000.137.1fixed
Susecontainerdlinux enterprise server for sap applications 15 sp41.7.29-150000.137.1fixed
Susecontainerdlinux enterprise server for sap applications 15 sp51.7.29-150000.137.1fixed
Susecontainerdlinux enterprise server for sap applications 15 sp61.7.29-150000.137.1fixed
Susecontainerdlinux enterprise server 12 sp5-ltss1.7.29-16.110.1fixed
Susecontainerdlinux enterprise server ltss extended security 12 sp51.7.29-16.110.1fixed
Susegoogle-osconfig-agentlinux enterprise micro 5.520260615.01-150000.1.55.1fixed
Susegoogle-osconfig-agentlinux enterprise module for public cloud 15 sp420260615.01-150000.1.55.1fixed
Susegoogle-osconfig-agentlinux enterprise module for public cloud 15 sp520260615.01-150000.1.55.1fixed
Susegoogle-osconfig-agentlinux enterprise module for public cloud 15 sp620260615.01-150000.1.55.1fixed
Susegoogle-osconfig-agentlinux enterprise module for public cloud 15 sp720260615.01-150000.1.55.1fixed
Opensusedocker-stabletumbleweed24.0.9_ce-18.1fixed
Opensusecontainerdtumbleweed1.7.33-1.1fixed
Suseelemental-system-agentlinux micro 6.10.3.16-slfo.1.1_1.1fixed
Suseelemental-system-agentlinux micro 6.00.3.16-1.1fixed
Opensusekubevirttumbleweed1.8.3-1.1fixed
Susegoogle-osconfig-agentlinux enterprise module for public cloud 1220250416.02-1.44.1fixed
Opensuseelemental-toolkitleap 16.02.3.4-160000.1.1fixed
Opensuseelemental-system-agentleap 16.00.3.16-160000.1.1fixed
Opensuseelemental-registerleap 16.01.9.2-160000.1.1fixed
Suseelemental-system-agentlinux micro 6.20.3.16-160000.1.1fixed
Suseelemental-registerlinux micro 6.21.9.2-160000.1.1fixed
Suseelemental-toolkitlinux micro 6.22.3.4-160000.1.1fixed
Opensuseshadowsocks-v2ray-plugintumbleweed5.49.0-1.1fixed
Opensusegoogle-osconfig-agenttumbleweed20260511.00-1.1fixed
Opensusecri-toolstumbleweed1.36.0-1.1fixed
Opensusedistributiontumbleweed3.1.0-1.1fixed
Opensusegolang-github-prometheus-alertmanagertumbleweed0.31.1-3.1fixed
Suseignitionlinux micro 6.22.21.0-160000.3.1fixed
Opensuseignitionleap 16.02.21.0-160000.3.1fixed
Opensusev2ray-coreleap 16.05.47.0-bp160.1.1fixed
Opensusegoogle-cloud-sap-agentleap 16.03.12-160000.1.1fixed
Susegoogle-cloud-sap-agentlinux enterprise server 16.03.12-160000.1.1fixed
Susegoogle-cloud-sap-agentlinux enterprise server for sap applications 16.03.12-160000.1.1fixed
Suseignitionlinux micro 6.02.19.0-3.1fixed
Suseignitionlinux micro 6.12.19.0-slfo.1.1_3.1fixed
Suseazure-storage-azcopylinux enterprise module for public cloud 15 sp410.29.1-150400.9.6.1fixed
Suseazure-storage-azcopylinux enterprise module for public cloud 15 sp510.29.1-150400.9.6.1fixed
Suseazure-storage-azcopylinux enterprise module for public cloud 15 sp610.29.1-150400.9.6.1fixed
Suseazure-storage-azcopylinux enterprise module for public cloud 15 sp710.29.1-150400.9.6.1fixed
Suseignitionlinux enterprise module for hpc 15 sp72.14.0-150400.9.15.1fixed
Suseignitionlinux enterprise server 15 sp6-ltss2.14.0-150400.9.15.1fixed
Opensuseignitionleap 15.62.14.0-150400.9.15.1fixed
Opensuseclusterctltumbleweed1.12.5-1.1fixed
Suseignitionlinux enterprise micro 5.42.15.0-150400.4.14.1fixed
Suseignitionlinux enterprise micro 5.52.17.0-150500.3.15.1fixed
Suseignitionlinux enterprise micro 5.22.14.0-150300.6.19.1fixed
Susegoogle-cloud-sap-agentlinux enterprise module for public cloud 123.12-6.60.1fixed
Susegoogle-cloud-sap-agentlinux enterprise module for public cloud 15 sp43.12-150100.3.63.1fixed
Susegoogle-cloud-sap-agentlinux enterprise module for public cloud 15 sp53.12-150100.3.63.1fixed
Susegoogle-cloud-sap-agentlinux enterprise module for public cloud 15 sp63.12-150100.3.63.1fixed
Susegoogle-cloud-sap-agentlinux enterprise module for public cloud 15 sp73.12-150100.3.63.1fixed
Opensusegoogle-cloud-sap-agentleap 15.63.12-150100.3.63.1fixed
Suseignitionlinux enterprise micro 5.32.14.0-150400.4.15.1fixed
Opensusek6tumbleweed1.7.1-1.1fixed
Opensuseignitiontumbleweed2.26.0-3.1fixed
Opensuseamazon-cloudwatch-agenttumbleweed1.300064.0-2.1fixed
Opensusev2ray-coretumbleweed5.47.0-1.1fixed
Opensuserclonetumbleweed1.73.3-1.1fixed
Opensuseazure-storage-azcopytumbleweed10.32.2-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiangolang-google-grpcsourcesid1.79.3-1not yet assignedNot reported[1132228]
Debiangolang-google-grpcsourceforky1.79.3-1not yet assignedNot reported[1132228]
Debiangolang-google-grpcsourcetrixie(unfixed)not yet assignedNot reported[1132228]
Debiangolang-google-grpcsourcebookworm(unfixed)not yet assignedNot reported[1132228]
Gogoogle.golang.org/grpcGoNot reported1.79.3Not reportedGHSA-P77J-4MVH-X3M3Not reported
Gogoogle.golang.org/grpcGoNot reported1.79.3Not reportedNot reportedNot reported
CpegrpccpeNot reported1.79.3Not reportedNVD-CVE-2026-33186Not reported
Susedocker-stablerpmlinux enterprise server 12 sp5-ltss24.0.9_ce-1.40.1Not reportedSUSE-SU-2026:4533-1Not reported
Susedocker-stablerpmlinux enterprise server ltss extended security 12 sp524.0.9_ce-1.40.1Not reportedSUSE-SU-2026:4533-1Not reported
Susedocker-stablerpmlinux enterprise module for containers 15 sp724.0.9_ce-150000.1.48.1Not reportedSUSE-SU-2026:4535-1Not reported
Susedocker-stablerpmlinux enterprise high performance computing 15 sp4-espos24.0.9_ce-150000.1.48.1Not reportedSUSE-SU-2026:4535-1Not reported
Susedocker-stablerpmlinux enterprise high performance computing 15 sp4-ltss24.0.9_ce-150000.1.48.1Not reportedSUSE-SU-2026:4535-1Not reported
Susedocker-stablerpmlinux enterprise high performance computing 15 sp5-espos24.0.9_ce-150000.1.48.1Not reportedSUSE-SU-2026:4535-1Not reported
Susedocker-stablerpmlinux enterprise high performance computing 15 sp5-ltss24.0.9_ce-150000.1.48.1Not reportedSUSE-SU-2026:4535-1Not reported
Susedocker-stablerpmlinux enterprise server 15 sp4-ltss24.0.9_ce-150000.1.48.1Not reportedSUSE-SU-2026:4535-1Not reported
Susedocker-stablerpmlinux enterprise server 15 sp5-ltss24.0.9_ce-150000.1.48.1Not reportedSUSE-SU-2026:4535-1Not reported
Susedocker-stablerpmlinux enterprise server 15 sp6-ltss24.0.9_ce-150000.1.48.1Not reportedSUSE-SU-2026:4535-1Not reported
Susedocker-stablerpmlinux enterprise server for sap applications 15 sp424.0.9_ce-150000.1.48.1Not reportedSUSE-SU-2026:4535-1Not reported
Susedocker-stablerpmlinux enterprise server for sap applications 15 sp524.0.9_ce-150000.1.48.1Not reportedSUSE-SU-2026:4535-1Not reported
Susedocker-stablerpmlinux enterprise server for sap applications 15 sp624.0.9_ce-150000.1.48.1Not reportedSUSE-SU-2026:4535-1Not reported
Opensusepvetuirpmtumbleweed1.4.3-1.1Not reportedOPENSUSE-SU-2026:11970-1Not reported
Susegoogle-guest-agentrpmlinux micro 6.020260903.01-2.1Not reportedSUSE-SU-2026:23874-1Not reported
Susegoogle-guest-agentrpmlinux micro 6.120260903.01-slfo.1.1_2.1Not reportedSUSE-SU-2026:23745-1Not reported
Susegoogle-guest-agentrpmlinux enterprise module for public cloud 1220260903.01-1.75.1Not reportedSUSE-SU-2026:4272-1Not reported
Susegoogle-guest-agentrpmlinux enterprise micro 5.520260903.01-150000.1.85.1Not reportedSUSE-SU-2026:4270-1Not reported
Susegoogle-guest-agentrpmlinux enterprise module for public cloud 15 sp420260903.01-150000.1.85.1Not reportedSUSE-SU-2026:4270-1Not reported
Susegoogle-guest-agentrpmlinux enterprise module for public cloud 15 sp520260903.01-150000.1.85.1Not reportedSUSE-SU-2026:4270-1Not reported
Susegoogle-guest-agentrpmlinux enterprise module for public cloud 15 sp620260903.01-150000.1.85.1Not reportedSUSE-SU-2026:4270-1Not reported
Susegoogle-guest-agentrpmlinux enterprise module for public cloud 15 sp720260903.01-150000.1.85.1Not reportedSUSE-SU-2026:4270-1Not reported
Susedistributionrpmlinux enterprise module for containers 15 sp73.1.1-150400.9.41.1Not reportedSUSE-SU-2026:4212-1Not reported
Susedistributionrpmlinux enterprise high performance computing 15 sp4-espos3.1.1-150400.9.41.1Not reportedSUSE-SU-2026:4212-1Not reported
Susedistributionrpmlinux enterprise high performance computing 15 sp4-ltss3.1.1-150400.9.41.1Not reportedSUSE-SU-2026:4212-1Not reported
Susedistributionrpmlinux enterprise high performance computing 15 sp5-espos3.1.1-150400.9.41.1Not reportedSUSE-SU-2026:4212-1Not reported
Susedistributionrpmlinux enterprise high performance computing 15 sp5-ltss3.1.1-150400.9.41.1Not reportedSUSE-SU-2026:4212-1Not reported
Susedistributionrpmlinux enterprise server 15 sp4-ltss3.1.1-150400.9.41.1Not reportedSUSE-SU-2026:4212-1Not reported
Susedistributionrpmlinux enterprise server 15 sp5-ltss3.1.1-150400.9.41.1Not reportedSUSE-SU-2026:4212-1Not reported
Susedistributionrpmlinux enterprise server 15 sp6-ltss3.1.1-150400.9.41.1Not reportedSUSE-SU-2026:4212-1Not reported
Susedistributionrpmlinux enterprise server for sap applications 15 sp43.1.1-150400.9.41.1Not reportedSUSE-SU-2026:4212-1Not reported
Susedistributionrpmlinux enterprise server for sap applications 15 sp53.1.1-150400.9.41.1Not reportedSUSE-SU-2026:4212-1Not reported
Susedistributionrpmlinux enterprise server for sap applications 15 sp63.1.1-150400.9.41.1Not reportedSUSE-SU-2026:4212-1Not reported
Opensusecf-clirpmtumbleweed8.18.4+git.0.3fcd823a1-1.1Not reportedOPENSUSE-SU-2026:11410-1Not reported
Opensusetraefik2rpmtumbleweed2.11.53-1.1Not reportedOPENSUSE-SU-2026:11403-1Not reported
Opensusetraefikrpmtumbleweed3.7.9-1.1Not reportedOPENSUSE-SU-2026:11402-1Not reported
Susegoogle-guest-agentrpmlinux micro 6.120260529.00-slfo.1.1_1.1Not reportedSUSE-SU-2026:22442-1Not reported
Susegoogle-guest-agentrpmlinux micro 6.020260529.00-1.1Not reportedSUSE-SU-2026:22423-1Not reported
Opensusedocker-stablerpmleap 16.024.0.9_ce-160000.6.1Not reportedOPENSUSE-SU-2026:21205-1Not reported
Susegoogle-guest-agentrpmlinux enterprise server 16.020260529.00-160000.1.1Not reportedSUSE-SU-2026:22376-1Not reported
Susegoogle-guest-agentrpmlinux enterprise server for sap applications 16.020260529.00-160000.1.1Not reportedSUSE-SU-2026:22376-1Not reported
Susegoogle-cloud-sap-agentrpmlinux enterprise server 16.03.15-160000.1.1Not reportedSUSE-SU-2026:22328-1Not reported
Susegoogle-cloud-sap-agentrpmlinux enterprise server for sap applications 16.03.15-160000.1.1Not reportedSUSE-SU-2026:22328-1Not reported
Opensusegoogle-guest-agentrpmleap 16.020260529.00-160000.1.1Not reportedOPENSUSE-SU-2026:21069-1Not reported
Opensusegoogle-cloud-sap-agentrpmleap 16.03.15-160000.1.1Not reportedOPENSUSE-SU-2026:21010-1Not reported
Opensuseskopeorpmtumbleweed1.23.0-1.1Not reportedOPENSUSE-SU-2026:11150-1Not reported
Susegoogle-osconfig-agentrpmlinux enterprise module for public cloud 1220260615.01-1.47.1Not reportedSUSE-SU-2026:2665-1Not reported
Susecontainerdrpmlinux enterprise micro 5.31.7.29-150000.137.1Not reportedSUSE-SU-2026:2639-1Not reported
Susecontainerdrpmlinux enterprise micro 5.41.7.29-150000.137.1Not reportedSUSE-SU-2026:2639-1Not reported
Susecontainerdrpmlinux enterprise micro 5.51.7.29-150000.137.1Not reportedSUSE-SU-2026:2639-1Not reported
Susecontainerdrpmlinux enterprise module for basesystem 15 sp71.7.29-150000.137.1Not reportedSUSE-SU-2026:2639-1Not reported
Susecontainerdrpmlinux enterprise module for containers 15 sp71.7.29-150000.137.1Not reportedSUSE-SU-2026:2639-1Not reported
Susecontainerdrpmlinux enterprise high performance computing 15 sp4-espos1.7.29-150000.137.1Not reportedSUSE-SU-2026:2639-1Not reported
Susecontainerdrpmlinux enterprise high performance computing 15 sp4-ltss1.7.29-150000.137.1Not reportedSUSE-SU-2026:2639-1Not reported
Susecontainerdrpmlinux enterprise high performance computing 15 sp5-espos1.7.29-150000.137.1Not reportedSUSE-SU-2026:2639-1Not reported
Susecontainerdrpmlinux enterprise high performance computing 15 sp5-ltss1.7.29-150000.137.1Not reportedSUSE-SU-2026:2639-1Not reported
Susecontainerdrpmlinux enterprise server 15 sp4-ltss1.7.29-150000.137.1Not reportedSUSE-SU-2026:2639-1Not reported
Susecontainerdrpmlinux enterprise server 15 sp5-ltss1.7.29-150000.137.1Not reportedSUSE-SU-2026:2639-1Not reported
Susecontainerdrpmlinux enterprise server 15 sp6-ltss1.7.29-150000.137.1Not reportedSUSE-SU-2026:2639-1Not reported
Susecontainerdrpmlinux enterprise server for sap applications 15 sp41.7.29-150000.137.1Not reportedSUSE-SU-2026:2639-1Not reported
Susecontainerdrpmlinux enterprise server for sap applications 15 sp51.7.29-150000.137.1Not reportedSUSE-SU-2026:2639-1Not reported
Susecontainerdrpmlinux enterprise server for sap applications 15 sp61.7.29-150000.137.1Not reportedSUSE-SU-2026:2639-1Not reported
Susecontainerdrpmlinux enterprise server 12 sp5-ltss1.7.29-16.110.1Not reportedSUSE-SU-2026:2640-1Not reported
Susecontainerdrpmlinux enterprise server ltss extended security 12 sp51.7.29-16.110.1Not reportedSUSE-SU-2026:2640-1Not reported
Susegoogle-osconfig-agentrpmlinux enterprise micro 5.520260615.01-150000.1.55.1Not reportedSUSE-SU-2026:2611-1Not reported
Susegoogle-osconfig-agentrpmlinux enterprise module for public cloud 15 sp420260615.01-150000.1.55.1Not reportedSUSE-SU-2026:2611-1Not reported
Susegoogle-osconfig-agentrpmlinux enterprise module for public cloud 15 sp520260615.01-150000.1.55.1Not reportedSUSE-SU-2026:2611-1Not reported
Susegoogle-osconfig-agentrpmlinux enterprise module for public cloud 15 sp620260615.01-150000.1.55.1Not reportedSUSE-SU-2026:2611-1Not reported
Susegoogle-osconfig-agentrpmlinux enterprise module for public cloud 15 sp720260615.01-150000.1.55.1Not reportedSUSE-SU-2026:2611-1Not reported
Opensusedocker-stablerpmtumbleweed24.0.9_ce-18.1Not reportedOPENSUSE-SU-2026:11075-1Not reported
Opensusecontainerdrpmtumbleweed1.7.33-1.1Not reportedOPENSUSE-SU-2026:11107-1Not reported
Suseelemental-system-agentrpmlinux micro 6.10.3.16-slfo.1.1_1.1Not reportedSUSE-SU-2026:22141-1Not reported
Suseelemental-system-agentrpmlinux micro 6.00.3.16-1.1Not reportedSUSE-SU-2026:22101-1Not reported
Opensusekubevirtrpmtumbleweed1.8.3-1.1Not reportedOPENSUSE-SU-2026:11015-1Not reported
Susegoogle-osconfig-agentrpmlinux enterprise module for public cloud 1220250416.02-1.44.1Not reportedSUSE-SU-2026:2347-1Not reported
Opensuseelemental-toolkitrpmleap 16.02.3.4-160000.1.1Not reportedOPENSUSE-SU-2026:20921-1Not reported
Opensuseelemental-system-agentrpmleap 16.00.3.16-160000.1.1Not reportedOPENSUSE-SU-2026:20924-1Not reported
Opensuseelemental-registerrpmleap 16.01.9.2-160000.1.1Not reportedOPENSUSE-SU-2026:20920-1Not reported
Suseelemental-system-agentrpmlinux micro 6.20.3.16-160000.1.1Not reportedSUSE-SU-2026:22053-1Not reported
Suseelemental-registerrpmlinux micro 6.21.9.2-160000.1.1Not reportedSUSE-SU-2026:22050-1Not reported
Suseelemental-toolkitrpmlinux micro 6.22.3.4-160000.1.1Not reportedSUSE-SU-2026:22051-1Not reported
Opensuseshadowsocks-v2ray-pluginrpmtumbleweed5.49.0-1.1Not reportedOPENSUSE-SU-2026:10902-1Not reported
Opensusegoogle-osconfig-agentrpmtumbleweed20260511.00-1.1Not reportedOPENSUSE-SU-2026:10771-1Not reported
Opensusecri-toolsrpmtumbleweed1.36.0-1.1Not reportedOPENSUSE-SU-2026:10690-1Not reported
Opensusedistributionrpmtumbleweed3.1.0-1.1Not reportedOPENSUSE-SU-2026:10631-1Not reported
Opensusegolang-github-prometheus-alertmanagerrpmtumbleweed0.31.1-3.1Not reportedOPENSUSE-SU-2026:10612-1Not reported
Suseignitionrpmlinux micro 6.22.21.0-160000.3.1Not reportedSUSE-SU-2026:21272-1Not reported
Opensuseignitionrpmleap 16.02.21.0-160000.3.1Not reportedOPENSUSE-SU-2026:20603-1Not reported
Opensusev2ray-corerpmleap 16.05.47.0-bp160.1.1Not reportedOPENSUSE-SU-2026:20584-1Not reported
Opensusegoogle-cloud-sap-agentrpmleap 16.03.12-160000.1.1Not reportedOPENSUSE-SU-2026:20555-1Not reported
Susegoogle-cloud-sap-agentrpmlinux enterprise server 16.03.12-160000.1.1Not reportedSUSE-SU-2026:21210-1Not reported
Susegoogle-cloud-sap-agentrpmlinux enterprise server for sap applications 16.03.12-160000.1.1Not reportedSUSE-SU-2026:21210-1Not reported
Suseignitionrpmlinux micro 6.02.19.0-3.1Not reportedSUSE-SU-2026:21128-1Not reported
Suseignitionrpmlinux micro 6.12.19.0-slfo.1.1_3.1Not reportedSUSE-SU-2026:21115-1Not reported
Suseazure-storage-azcopyrpmlinux enterprise module for public cloud 15 sp410.29.1-150400.9.6.1Not reportedSUSE-SU-2026:1395-1Not reported
Suseazure-storage-azcopyrpmlinux enterprise module for public cloud 15 sp510.29.1-150400.9.6.1Not reportedSUSE-SU-2026:1395-1Not reported
Suseazure-storage-azcopyrpmlinux enterprise module for public cloud 15 sp610.29.1-150400.9.6.1Not reportedSUSE-SU-2026:1395-1Not reported
Suseazure-storage-azcopyrpmlinux enterprise module for public cloud 15 sp710.29.1-150400.9.6.1Not reportedSUSE-SU-2026:1395-1Not reported
Suseignitionrpmlinux enterprise module for hpc 15 sp72.14.0-150400.9.15.1Not reportedSUSE-SU-2026:1314-1Not reported
Suseignitionrpmlinux enterprise server 15 sp6-ltss2.14.0-150400.9.15.1Not reportedSUSE-SU-2026:1314-1Not reported
Opensuseignitionrpmleap 15.62.14.0-150400.9.15.1Not reportedSUSE-SU-2026:1314-1Not reported
Opensuseclusterctlrpmtumbleweed1.12.5-1.1Not reportedOPENSUSE-SU-2026:10523-1Not reported
Suseignitionrpmlinux enterprise micro 5.42.15.0-150400.4.14.1Not reportedSUSE-SU-2026:1208-1Not reported
Suseignitionrpmlinux enterprise micro 5.52.17.0-150500.3.15.1Not reportedSUSE-SU-2026:1200-1Not reported
Suseignitionrpmlinux enterprise micro 5.22.14.0-150300.6.19.1Not reportedSUSE-SU-2026:1198-1Not reported
Susegoogle-cloud-sap-agentrpmlinux enterprise module for public cloud 123.12-6.60.1Not reportedSUSE-SU-2026:1195-1Not reported
Susegoogle-cloud-sap-agentrpmlinux enterprise module for public cloud 15 sp43.12-150100.3.63.1Not reportedSUSE-SU-2026:1194-1Not reported
Susegoogle-cloud-sap-agentrpmlinux enterprise module for public cloud 15 sp53.12-150100.3.63.1Not reportedSUSE-SU-2026:1194-1Not reported
Susegoogle-cloud-sap-agentrpmlinux enterprise module for public cloud 15 sp63.12-150100.3.63.1Not reportedSUSE-SU-2026:1194-1Not reported
Susegoogle-cloud-sap-agentrpmlinux enterprise module for public cloud 15 sp73.12-150100.3.63.1Not reportedSUSE-SU-2026:1194-1Not reported
Opensusegoogle-cloud-sap-agentrpmleap 15.63.12-150100.3.63.1Not reportedSUSE-SU-2026:1194-1Not reported
Suseignitionrpmlinux enterprise micro 5.32.14.0-150400.4.15.1Not reportedSUSE-SU-2026:1197-1Not reported
Opensusek6rpmtumbleweed1.7.1-1.1Not reportedOPENSUSE-SU-2026:10484-1Not reported
Opensuseignitionrpmtumbleweed2.26.0-3.1Not reportedOPENSUSE-SU-2026:10474-1Not reported
Opensuseamazon-cloudwatch-agentrpmtumbleweed1.300064.0-2.1Not reportedOPENSUSE-SU-2026:10420-1Not reported
Opensusev2ray-corerpmtumbleweed5.47.0-1.1Not reportedOPENSUSE-SU-2026:10432-1Not reported
Opensuserclonerpmtumbleweed1.73.3-1.1Not reportedOPENSUSE-SU-2026:10419-1Not reported
Opensuseazure-storage-azcopyrpmtumbleweed10.32.2-1.1Not reportedOPENSUSE-SU-2026:10407-1Not reported

[Debian bug #1132228]

Notes

[trixie] golang-google-grpc: Minor issue [bookworm] golang-google-grpc: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [golang-google-grpc-dev]Affected

    Source package: [golang-google-grpc]

    Details (2)

    • 1.33.3-2 · all · bookworm

      Affected

      nvd · golang-google-grpc · debian · bookworm; nvd · golang-google-grpc · debian · 12

    • 1.33.3-2 · all · bookworm

      Affected

      nvd · golang-google-grpc · debian · bookworm; nvd · golang-google-grpc · debian · 12

  • [protoc-gen-go-grpc]Affected

    Source package: [golang-google-grpc]

    Details (2)

    • 1.33.3-2+b4 · amd64 · bookworm

      Affected

      nvd · golang-google-grpc · debian · bookworm; nvd · golang-google-grpc · debian · 12

    • 1.33.3-2+b4 · arm64 · bookworm

      Affected

      nvd · golang-google-grpc · debian · bookworm; nvd · golang-google-grpc · debian · 12

[Debian 13 (Trixie)]

  • [golang-google-grpc-dev]Affected

    Source package: [golang-google-grpc]

    Details (4)

    • 1.64.0-7 · all · trixie

      Affected

      nvd · golang-google-grpc · debian · 13

    • 1.64.0-7 · all · trixie

      Affected

      nvd · golang-google-grpc · debian · 13

    • 1.79.3-1~bpo13+1 · all · trixie-backports

      Affected

      nvd · golang-google-grpc · debian · 13

    • 1.79.3-1~bpo13+1 · all · trixie-backports

      Affected

      nvd · golang-google-grpc · debian · 13

  • [protoc-gen-go-grpc]Affected

    Source package: [golang-google-grpc]

    Details (4)

    • 1.64.0-7+b2 · amd64 · trixie

      Affected

      nvd · golang-google-grpc · debian · 13

    • 1.64.0-7+b2 · arm64 · trixie

      Affected

      nvd · golang-google-grpc · debian · 13

    • 1.79.3-1~bpo13+1 · amd64 · trixie-backports

      Affected

      nvd · golang-google-grpc · debian · 13

    • 1.79.3-1~bpo13+1 · arm64 · trixie-backports

      Affected

      nvd · golang-google-grpc · debian · 13

[openSUSE Tumbleweed]

  • [pvetui]Affected

    Source package: [pvetui]

    Details (1)

    • 1.2.1-1.3 · x86_64 · tumbleweed

      Affected · Fixed: 1.4.3-1.1

      nvd · pvetui · opensuse · tumbleweed

  • [clusterctl-bash-completion]Unknown

    Source package: [clusterctl]

    Details (1)

    • 1.14.0-1.1 · noarch · tumbleweed

      Unknown · Fixed: 1.12.5-1.1

      Version impact unknown

      nvd · clusterctl · opensuse · tumbleweed

  • [clusterctl-fish-completion]Unknown

    Source package: [clusterctl]

    Details (1)

    • 1.14.0-1.1 · noarch · tumbleweed

      Unknown · Fixed: 1.12.5-1.1

      Version impact unknown

      nvd · clusterctl · opensuse · tumbleweed

  • [clusterctl-zsh-completion]Unknown

    Source package: [clusterctl]

    Details (1)

    • 1.14.0-1.1 · noarch · tumbleweed

      Unknown · Fixed: 1.12.5-1.1

      Version impact unknown

      nvd · clusterctl · opensuse · tumbleweed

  • [containerd-ctr]Unknown

    Source package: [containerd]

    Details (1)

    • 1.7.33-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 1.7.33-1.1

      Version impact unknown

      nvd · containerd · opensuse · tumbleweed

  • [containerd-devel]Unknown

    Source package: [containerd]

    Details (1)

    • 1.7.33-1.3 · noarch · tumbleweed

      Unknown · Fixed: 1.7.33-1.1

      Version impact unknown

      nvd · containerd · opensuse · tumbleweed

  • [distribution-registry]Unknown

    Source package: [distribution]

    Details (1)

    • 3.1.1-5.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.0-1.1

      Version impact unknown

      nvd · distribution · opensuse · tumbleweed

  • [docker-stable-bash-completion]Unknown

    Source package: [docker-stable]

    Details (1)

    • 24.0.9_ce-19.3 · noarch · tumbleweed

      Unknown · Fixed: 24.0.9_ce-18.1

      Version impact unknown

      nvd · docker-stable · opensuse · tumbleweed

  • [docker-stable-buildx]Unknown

    Source package: [docker-stable]

    Details (1)

    • 0.25.0-19.3 · x86_64 · tumbleweed

      Unknown · Fixed: 24.0.9_ce-18.1

      Version impact unknown

      nvd · docker-stable · opensuse · tumbleweed

  • [docker-stable-fish-completion]Unknown

    Source package: [docker-stable]

    Details (1)

    • 24.0.9_ce-19.3 · noarch · tumbleweed

      Unknown · Fixed: 24.0.9_ce-18.1

      Version impact unknown

      nvd · docker-stable · opensuse · tumbleweed

  • [docker-stable-rootless-extras]Unknown

    Source package: [docker-stable]

    Details (1)

    • 24.0.9_ce-19.3 · noarch · tumbleweed

      Unknown · Fixed: 24.0.9_ce-18.1

      Version impact unknown

      nvd · docker-stable · opensuse · tumbleweed

  • [docker-stable-zsh-completion]Unknown

    Source package: [docker-stable]

    Details (1)

    • 24.0.9_ce-19.3 · noarch · tumbleweed

      Unknown · Fixed: 24.0.9_ce-18.1

      Version impact unknown

      nvd · docker-stable · opensuse · tumbleweed

  • [golang-github-teddysun-v2ray-plugin]Unknown

    Source package: [shadowsocks-v2ray-plugin]

    Details (1)

    • 5.49.0-1.4 · noarch · tumbleweed

      Unknown · Fixed: 5.49.0-1.1

      Version impact unknown

      nvd · shadowsocks-v2ray-plugin · opensuse · tumbleweed

  • [golang-github-v2fly-v2ray-core]Unknown

    Source package: [v2ray-core]

    Details (1)

    • 5.53.0-2.1 · noarch · tumbleweed

      Unknown · Fixed: 5.47.0-1.1

      Version impact unknown

      nvd · v2ray-core · opensuse · tumbleweed

  • [k6-bash-completion]Unknown

    Source package: [k6]

    Details (1)

    • 2.2.0-1.1 · noarch · tumbleweed

      Unknown · Fixed: 1.7.1-1.1

      Version impact unknown

      nvd · k6 · opensuse · tumbleweed

  • [k6-fish-completion]Unknown

    Source package: [k6]

    Details (1)

    • 2.2.0-1.1 · noarch · tumbleweed

      Unknown · Fixed: 1.7.1-1.1

      Version impact unknown

      nvd · k6 · opensuse · tumbleweed

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [GitHub Advisory Database] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]