CVE-2026-101915

ADVISORY - github

Summary

Impact

If an application method handler crashes, the error message is included in the status message sent to the client. This can leak to the client any sensitive data that may be included in the error message. This impacts anyone using @grpc/grpc-js to run servers.

Patches

This vulnerability is fixed in 1.13.6 and 1.14.5.

Workarounds

This can be avoided by using a top-level error handler in method handlers to strip out sensitive error information.

EPSS Score⁠: 0.00251 (0.148)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-550⁠

Server-generated Error Message Containing Sensitive Information

ADVISORY - github

CWE-550⁠

Server-generated Error Message Containing Sensitive Information

Impacted images

Advisories

NIST

CREATED

3 days ago

UPDATED

3 hours ago

ADVISORY IDCVE-2026-101915⁠

EXPLOITABILITY SCORE

2.2

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-550⁠

CVSS SCORE

3.7low

GitHub

CREATED

1 day ago

UPDATED

1 day ago

ADVISORY IDGHSA-f596-whhp-79r4⁠

EXPLOITABILITY SCORE

2.2

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-550⁠

CVSS SCORE

3.7low

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-4jg6-7mmp-64x9

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

3 hours ago

UPDATED

3 hours ago

ADVISORY ID

MINI-57rr-gjxc-h4f8

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

3 hours ago

UPDATED

3 hours ago

ADVISORY ID

MINI-8cfg-gqc6-fhcj

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

3 hours ago

UPDATED

3 hours ago

ADVISORY ID

MINI-985w-82vm-2j62

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

3 hours ago

UPDATED

3 hours ago

ADVISORY ID

MINI-c34v-6r6g-pm8r

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-f3hf-p7jh-wqw4

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

3 hours ago

UPDATED

3 hours ago

ADVISORY ID

MINI-f8rf-gj5w-46w9

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

4 hours ago

UPDATED

4 hours ago

ADVISORY ID

MINI-gpr6-7vh7-w695

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

3 hours ago

UPDATED

3 hours ago

ADVISORY ID

MINI-h8v5-93w6-7h4x

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

3 hours ago

UPDATED

3 hours ago

ADVISORY ID

MINI-rj7h-25wp-vv72

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY