Skip to content

does grpc-netty-shaded < 1.75.0 affected by CVE-2025-55163 ? #12416

@fthmko

Description

@fthmko

According to the Github Advisory, grpc-netty-shaded < 1.75.0 are marked as affected by the MadeYouReset HTTP/2 DDoS vulnerability.
But in the 1.75.0 release notes, it's only mention it in the "Improvements" section rather than in the "Bug Fixes" section as other vulnerabilities.

Therefore, should I upgrade to 1.75.0 or later to mitigate this vulnerability?

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions