Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: h2oai Component: Quicly Clear all filters
TI-2026-32375 CVE-2026-44434

Quicly is vulnerable to stateless reset injection

Priority LOW 29

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00209 Published 2026-07-16 No fix listed CWE-345
TI-2026-32374 CVE-2026-44433

Quicly is vulnerable to memory exhaustion

Priority LOW 39

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00488 Published 2026-07-16 Fixed in 8b178e6 CWE-400
TI-2025-38115 CVE-2025-61684

Quicly has assertion failures

Priority LOW 39

Quicly, an IETF QUIC protocol implementation, is susceptible to a denial-of-service attack prior to commit d9d3df6a8530a102b57d840e39b0311ce5c9e14e.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00395 Published 2026-01-19 No fix listed CWE-20