Vulnerabilities

TI-2026-17323 CVE-2026-21438 · GHSA-2f2x-8mwp-p2gc

webtransport-go affected by a Memory Exhaustion Attack due to Missing Cleanup of Streams Map

LOW 30

webtransport-go is an implementation of the WebTransport protocol.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00406 Published 2026-02-12 Fixed in 0.10.0 CWE-401

TI-2026-17320 CVE-2026-21435 · GHSA-px4r-g4p3-hhqv

LOW 39

webtransport-go is an implementation of the WebTransport protocol.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00458 Published 2026-02-12 Fixed in 0.10.0 CWE-400

TI-2026-17319 CVE-2026-21434 · GHSA-g6x7-jq8p-6q9q

LOW 39

webtransport-go is an implementation of the WebTransport protocol.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00458 Published 2026-02-12 Fixed in 0.10.0 CWE-770