Security
فارسی
All products

quinn-proto

Rust / Cargo · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassemblyCVE-2026-25800 · GHSA-4W2J-M93H-CJ5JVersion ranges need review. quinn-proto Rust / Cargo High Fix reported
Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-protoGHSA-2HV7-GW8G-GPQ5 · RUSTSEC-2026-0342 quinn-proto Rust / Cargo Unknown Fix reported
Unbounded growth of pending connection ID retirements in quinn-protoGHSA-HMXJ-32VH-65VR · RUSTSEC-2026-0339 quinn-proto Rust / Cargo Unknown Fix reported
Outgoing datagram buffer accounting can panic the sender in quinn-protoGHSA-PPCP-V39W-8JQ2 · RUSTSEC-2026-0343 quinn-proto Rust / Cargo High Fix reported
Stream reassembly memory-exhaustion guard in quinn-proto can be bypassedGHSA-QFWJ-VFXF-92J2 · RUSTSEC-2026-0341 quinn-proto Rust / Cargo High Fix reported
Remote peer can panic quinn-proto with zero-length STREAM frames during unordered readsGHSA-465W-V9Q3-7J98 · RUSTSEC-2026-0338 quinn-proto Rust / Cargo Unknown Fix reported
Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabledGHSA-3G6H-R5QX-F6HQ · RUSTSEC-2026-0340 quinn-proto Rust / Cargo High Fix reported
Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsingCVE-2026-31812 · GHSA-6XVM-J4WR-6V98Version ranges need review. quinn-protoConfidential Compute Attestation/build-of-trustee/trustee-rhel9 Rust / CargoRed Hat High Fix reported
Denial of service in quinn-proto when using `Endpoint::retry()`CVE-2024-45311 · GHSA-VR26-JCQ5-FJJ8Version ranges need review. quinn-proto Rust / Cargo High Fix reported
Denial of Service issue in quinn-protoCVE-2023-42805 · GHSA-Q8WC-J5M9-27W3Version ranges need review. quinn-proto Rust / Cargo High Fix reported