Thanks, I think that might be part of the problem, but I also neglected to
rebuild my protobufs after updating and so older versions of grpc libraries
were still getting called. (protobufs were in separate projects and I
didn't think to update the dependencies of those projects and rebuild
You need to add a dependency on grpc-api (or make sure that you have the
1.57.2 version of it).
On Fri, Aug 18, 2023 at 7:31 AM 'Mike Yawn' via grpc.io <
grpc-io@googlegroups.com> wrote:
> I have a demo program that shows building microservices with Hazelcast +
> gRPC that works fine using gRPC
I have a demo program that shows building microservices with Hazelcast +
gRPC that works fine using gRPC 1.48.0.
My build system advised that due to CVEs I should upgrade, so I moved to
1.57.2. Modules upgraded are grpc-netty-shaded (this is the one where the
CVE was reported) as well as
