CVE-2020-7768: Grpc

Critical severity, CVSS 9.8. EPSS: 4.2% chance of exploitation in the next 30 days.

The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPackageDefinition.

Affected products

• Grpc Grpc: before 1.1.8 (fixed in 1.1.8); before 1.24.2 (fixed in 1.24.2)

Published 2020-11-11. Last modified 2026-06-17.