TI-2023-24866 CVE-2023-46239 · GHSA-3q6m-v84f-6p9h
quic-go vulnerable to pointer dereference that can lead to panic
Priority MEDIUM 41
quic-go is an implementation of the QUIC protocol in Go.
Quic-go Project
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Quic-go Project records in CISA KEVNo Quic-go Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Quic-go · all components
TI-2026-29554 CVE-2026-40898 · GHSA-vvgj-x9jq-8cj9
quic-go: HTTP/3 QPACK Trailer Expansion Memory Exhaustion
Priority LOW 39
quic-go is an implementation of the QUIC protocol in Go.
TI-2022-12731 CVE-2022-30591 · GHSA-w2rh-hf85-pfh4
quic-go through 0.27.0 allows remote attackers to cause a denial of service (CPU…
Priority LOW 38
quic-go through 0.27.0 allows remote attackers to cause a denial of service (CPU consumption) via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent.
TI-2025-40048 CVE-2025-64702 · GHSA-g754-hx8w-x2g6
quic-go HTTP/3 QPACK Header Expansion DoS
Priority LOW 32
quic-go is an implementation of the QUIC protocol in Go.
TI-2023-26931 CVE-2023-49295 · GHSA-ppxx-5m9h-6vxf
quic-go's path validation mechanism can cause denial of service
Priority LOW 31
quic-go is an implementation of the QUIC protocol (RFC 9000, RFC 9001, RFC 9002) in Go.