TI-2026-29554 CVE-2026-40898 · GHSA-vvgj-x9jq-8cj9
quic-go: HTTP/3 QPACK Trailer Expansion Memory Exhaustion
Priority LOW 39
quic-go is an implementation of the QUIC protocol in Go.
Vulnerabilities
5 records
TI-2025-40048 CVE-2025-64702 · GHSA-g754-hx8w-x2g6
quic-go HTTP/3 QPACK Header Expansion DoS
Priority LOW 32
quic-go is an implementation of the QUIC protocol in Go.
TI-2023-26931 CVE-2023-49295 · GHSA-ppxx-5m9h-6vxf
quic-go's path validation mechanism can cause denial of service
Priority LOW 31
quic-go is an implementation of the QUIC protocol (RFC 9000, RFC 9001, RFC 9002) in Go.
TI-2023-24866 CVE-2023-46239 · GHSA-3q6m-v84f-6p9h
quic-go vulnerable to pointer dereference that can lead to panic
Priority MEDIUM 41
quic-go is an implementation of the QUIC protocol in Go.
TI-2022-12731 CVE-2022-30591 · GHSA-w2rh-hf85-pfh4
quic-go through 0.27.0 allows remote attackers to cause a denial of service (CPU…
Priority LOW 38
quic-go through 0.27.0 allows remote attackers to cause a denial of service (CPU consumption) via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent.