Threats Tagged 'ghsa-94r6-xp5c-qwq5'
View all threats tagged with 'ghsa-94r6-xp5c-qwq5'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-94r6-xp5c-qwq5'
Click on any threat for detailed analysis and mitigation recommendations
Apache bRPC versions prior to 1.18.0 have an interpretation conflict in their HTTP protocol implementation that allows remote attackers to bypass access control rules enforced by a front proxy. This occurs because the bRPC server collapses consecutive slashes in request paths, treating paths with empty segments as equivalent to their collapsed form, contrary to RFC 3986. Additionally, the HTTP/2 implementation does not properly validate the :path pseudo-header, allowing malformed requests to be accepted. This vulnerability affects deployments where bRPC is behind a front proxy that enforces access control on literal paths but forwards requests to bRPC, enabling attackers to reach restricted resources. The issue is fixed in bRPC version 1.18.0. Join the discussion | GCVE Database | 10/21/2026, 15:42:29 UTC Added: 10/21/2026, 20:13:11 UTC |
Showing 1 to 1 of 1 result