GHSA-2jx2-qcm4-rf9h
Incomplete Internal State Distinction in GRPCWebToHTTP2ServerCodec
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| SwiftURL | github.com/grpc/grpc-swift | < 1.2.0 | 1.2.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
Affected gRPC Swift servers are vulnerable to precondition failures when parsing certain gRPC Web requests. This may lead to a denial of service.
### Patches
The problem has been fixed in 1.2.0.
### Workarounds
No workaround is available. Users must upgrade.
References
External links from the advisory. They lead to third-party sites.