security audit report

5 years ago · 70b7a7bc8a
parent 2b06d76cc0
commit 70b7a7bc8a
2 changed files with 6 additions and 0 deletions
--- a/doc/grpc_security_audit.pdf
+++ b/doc/grpc_security_audit.pdf
--- a/doc/security_audit.md
+++ b/doc/security_audit.md
@ -0,0 +1,6 @@
+# gRPC Security Audit
+
+A third-party security audit of gRPC C++ stack was performed by
+[Cure53](https://cure53.de) in October 2019. The full report can be found [here](https://github.com/grpc/grpc/tree/master/doc/grpc_security_audit.pdf). The medium severity issue (GRP-01-001) identified in this report was fixed in
+version 1.24.0 and above. The fix was also patched in version 1.23.1.
+