cbcvebase.

Apache Software Foundation Apache Brpc vulnerabilities

41 known vulnerabilities affecting apache_software_foundation/apache_brpc.

Total CVEs
41
CISA KEV
0
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL2HIGH6MEDIUM6UNKNOWN27

Vulnerabilities

Page 3 of 3
CVE-2026-87849P4MEDIUMCVSS 4.3fixed in 1.18.02026-10-21
CVE-2026-87849 [MEDIUM] CWE-125 CVE-2026-87849: The Discovery naming-service reply parser in Apache bRPC (versions < 1.18.0) calls RapidJSON object- The Discovery naming-service reply parser in Apache bRPC (versions < 1.18.0) calls RapidJSON object-only accessors (FindMember) on JSON values without first validating that those values are objects. A malformed Discovery response whose data/service members or instances list contain non-object entries (e.g. a bare integer) triggers the RapidJSON obje
nvd
← Previous3 / 3
Apache Software Foundation Apache Brpc vulnerabilities | cvebase