Security
فارسی
All products

github.com/quic-go/quic-go

Go · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
quic-go: HTTP/3 QPACK Trailer Expansion Memory Exhaustion CVE-2026-40898 · GHSA-VVGJ-X9JQ-8CJ9Version ranges need review. github.com/quic-go/quic-goRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/lighthouse-coredns-rhel9 GoRed Hat Medium Fix reported
quic-go HTTP/3 QPACK Header Expansion DoSCVE-2025-64702 · GHSA-G754-HX8W-X2G6Version ranges need review. github.com/quic-go/quic-goCryostat 4/cryostat/cryostat-storage-rhel9 GoRed Hat Medium Fix reported
quic-go: Panic occurs when queuing undecryptable packets after handshake completionCVE-2025-59530 · GHSA-47M2-4CR7-MHCWVersion ranges need review. github.com/quic-go/quic-goOpenShift Service Mesh 2/openshift-service-mesh/grafana-rhel8 GoRed Hat High Fix reported
quic-go affected by an ICMP Packet Too Large Injection Attack on LinuxCVE-2024-53259 · GHSA-PX8V-PP82-RCVRVersion ranges need review. github.com/quic-go/quic-goOpenShift Service Mesh 2/openshift-service-mesh/istio-cni-rhel8 GoRed Hat Medium Fix reported
QUIC's Connection ID Mechanism vulnerable to Memory Exhaustion AttackCVE-2024-22189 · GHSA-C33X-XQRF-C478Version ranges need review. github.com/quic-go/quic-goRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/lighthouse-agent-rhel9 GoRed Hat High Fix reported
quic-go's path validation mechanism can be exploited to cause denial of serviceCVE-2023-49295 · GHSA-PPXX-5M9H-6VXFVersion ranges need review. github.com/quic-go/quic-goOpenShift Service Mesh 2/openshift-service-mesh/istio-cni-rhel8 GoRed Hat Medium Fix reported
quic-go vulnerable to pointer dereference that can lead to panicCVE-2023-46239 · GHSA-3Q6M-V84F-6P9HVersion ranges need review. github.com/quic-go/quic-go Go High Fix reported
quic-go Has Panic in Path Probe Loss Recovery HandlingCVE-2025-29785 · GHSA-J972-J939-P2V3Version ranges need review. github.com/quic-go/quic-go Go High Fix reported