CVE-2026-50141: Grpc Metadata Client Spoofingcve-2026-50141-grpc-metadata-client-spoofing
Retrieving a value from gRPC incoming metadata using index `[0]` on the slice. Because incoming metadata values are controlled by the client, a forged value supplied by the client will appear first in the slice (`[0]`), masking any server-appended verified claims. To securely pass context from an authorizer interceptor, use `context.WithValue` and `ctx.Value
