Vulnerability in Quinn-rs Quinn
CVE-2026-31812
Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a cr…
EPSS: 0.002 (47.0th percentile) — read the EPSS interpretation.
Affected products
- Quinn-rs Quinn — versions < 0.11.14
Weakness classification (CWE)
References
- https://github.com/quinn-rs/quinn/security/advisories/GHSA-6xvm-j4wr-6v98 (x_refsource_CONFIRM)