Claude

Apache bRPC: Out-of-bounds Read in Multi-stream RPC Response Handling

Apache bRPC: Missing Authentication for Streaming RPC Frames

Apache bRPC: Resource Exhaustion via Unbounded Decompression and Unvalidated Wire-Declared Sizes

Apache bRPC: Unbounded Resource Consumption and Crash in the HTTP/2 Receive Path

Apache bRPC: HTTP Request Smuggling and Header Injection via Lenient HTTP/1.1 Header Parsing

Apache bRPC: Builtin services reachable from the public port via protobuf protocols despite ServerOptions.internal_port configuration

Apache bRPC: Access Control Bypass via HTTP Request Paths Containing Empty Path Segments

Apache bRPC: Remote denial of service (crash) via malformed stream feedback frames

Apache bRPC: Uncontrolled Resource Consumption via Excessive Streams in a Single RPC Request

Apache bRPC: Unbounded Memory Accumulation in Stream Message Reassembly