Quic-go_project Quic-go
5 CVEs affecting Quic-go_project Quic-go. Latest disclosed: 2026-06-04. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-46239 | High | 7.5 | 2023-10-31 | quic-go is an implementation of the QUIC protocol in Go. Starting in version 0.37.0 and prior to version 0.37.3, by serializing an ACK frame after the CRYTPO t… |
CVE-2022-30591 | High | 7.5 | 2022-07-06 | quic-go through 0.27.0 allows remote attackers to cause a denial of service (CPU consumption) via a Slowloris variant in which incomplete QUIC or HTTP/3 reques… |
CVE-2023-49295 | Medium | 6.4 | 2024-01-10 | quic-go is an implementation of the QUIC protocol (RFC 9000, RFC 9001, RFC 9002) in Go. An attacker can cause its peer to run out of memory sending a large num… |
CVE-2026-40898 | Medium | 5.3 | 2026-06-04 | quic-go is an implementation of the QUIC protocol in Go. Prior to version 0.59.1, an attacker can cause excessive memory allocation in quic-go's HTTP/3 client… |
CVE-2025-64702 | Medium | 5.3 | 2025-12-11 | quic-go is an implementation of the QUIC protocol in Go. Versions 0.56.0 and below are vulnerable to excessive memory allocation through quic-go's HTTP/3 clien… |