Vulnerability GHSA-g754-hx8w-x2g6: Information

Description

quic-go HTTP/3 QPACK Header Expansion DoS

Severity: MEDIUM (5.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
URL: https://github.com/advisories/GHSA-g754-hx8w-x2g6
Published: Dec. 11, 2025
Modified: Dec. 17, 2025
Error type identifier: CWE-770

Affected packages

Ecosystem
Name
Affected versions
Patched versions
Gogithub.com/quic-go/quic-go
<0.57.0
0.57.0

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://github.com/quic-go/quic-go/security/advisories/GHSA-g754-hx8w-x2g6
  • WEB
https://nvd.nist.gov/vuln/detail/CVE-2025-64702
  • ADVISORY
https://github.com/quic-go/quic-go/commit/5b2d2129f8315da41e01eff0a847ab38a34e83a8
  • WEB
https://github.com/quic-go/quic-go
  • PACKAGE
CVE-2025-64702
  • CVE
VKontakte|Telegram|YouTube|Forum|ALT Linux Space|Bugzilla
Version: v26.6.1
Back to top