Qquic-go

Products

Exploited and recent CVEs

• CVE-2026-57497 Medium 5.3 webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules 0.5%
• CVE-2026-40898 Medium 5.3 quic-go: HTTP/3 QPACK Trailer Expansion Memory Exhaustion 0.4%
• CVE-2026-21438 Medium 5.3 webtransport-go affected by a Memory Exhaustion Attack due to Missing Cleanup of Streams Map 0.4%
• CVE-2026-21435 Medium 5.3 webtransport-go CloseWithError can block indefinitely 0.5%
• CVE-2026-21434 Medium 5.3 webtransport-go affected by Memory Exhaustion Attack due to Missing Length Check in WT_CLOSE_SESSION Capsule 0.5%
• CVE-2025-64702 Medium 5.3 quic-go HTTP/3 QPACK Header Expansion DoS 0.9%
• CVE-2025-59530 High 7.5 quic-go has Client Crash Due to Premature HANDSHAKE_DONE Frame 0.5%
• CVE-2025-29785 High 7.5 quic-go Has Panic in Path Probe Loss Recovery Handling 0.5%
• CVE-2024-53259 Medium 6.5 quic-go affected by an ICMP Packet Too Large Injection Attack on Linux 0.6%
• CVE-2024-22189 High 7.5 QUIC's Connection ID Mechanism vulnerable to Memory Exhaustion Attack 1.1%
• CVE-2023-49295 Medium 6.4 quic-go's path validation mechanism can cause denial of service 1.2%
• CVE-2023-46239 High 7.5 quic-go vulnerable to pointer dereference that can lead to panic 1.0%