Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/quic-go/webtransport-go

4 known vulnerabilities (4 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 4 medium
Registry
pkg.go.dev

Advisories 4

  • CVE-2026-57497Medium 5.3

    webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules

    Affected: fixed in 0.11.1.

  • CVE-2026-21438Medium 5.3

    webtransport-go affected by a Memory Exhaustion Attack due to Missing Cleanup of Streams Map

    Affected: fixed in 0.10.0.

  • CVE-2026-21435Medium 5.3

    webtransport-go CloseWithError can block indefinitely

    Affected: fixed in 0.10.0.

  • CVE-2026-21434Medium 5.3

    webtransport-go affected by Memory Exhaustion Attack due to Missing Length Check in WT_CLOSE_SESSION Capsule

    Affected: fixed in 0.10.0; from 0.3.0, fixed in 0.10.0.