[Bug] Upgrade GRPC to 1.79 to remediate CVEs

Open Beginner friendly

#10,099 opened on Feb 11, 2026 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty: 2/5
Estimated time: 1-3 hours
Newbie friendliness: 65/100

Issue type: Bug
Clarity: Mostly clear
Activity status: Active
Tech stack: grpc, java
Domain: security

Research direction

The issue names no files or tests. Start by locating the RocketMQ gRPC dependency declaration and its resolved version, then verify the upgrade to gRPC 1.79 addresses CVE-2023-32731, CVE-2023-32732, and CVE-2025-55163 without breaking the build.

Written by the indexing model from the issue text.

Description

Before Creating the Bug Report

I found a bug, not just asking a question, which should be created in GitHub Discussions.
I have searched the GitHub Issues and GitHub Discussions of this repository and believe that this is not a duplicate.
I have confirmed that this bug belongs to the current repository, not other repositories of RocketMQ.

Runtime platform environment

All

RocketMQ version

develop

JDK Version

No response

Describe the Bug

Upgraded GRPC to 1.79 to remediate CVE-2023-32731, CVE-2023-32732 and CVE-2025-55163

Steps to Reproduce

N/A

What Did You Expect to See?

N/A

What Did You See Instead?

N/A

Additional Context