Spring Grpc (Vmware) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 21 known versions, newest CVE from 2026-04-28. Vendor: Vmware.

CVEs of Spring Grpc

• CVE-2026-40969 - CVSS 5.3 (medium), 2026-04-28: The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status description. This allows an…
• CVE-2026-40968 - CVSS 8.8 (high), 2026-04-28: When an authenticated user is denied access to a gRPC method, their authenticated identity remains bound to the gRPC worker thread and can be inherited by a…