What’s Vulnerable › Products

quic-go webtransport-go vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your quic-go webtransport-go version is affected

Latest quic-go webtransport-go vulnerabilities

• CVE-2026-57497 — webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules (CVSS 5.3)
• CVE-2026-21438 — webtransport-go affected by a Memory Exhaustion Attack due to Missing Cleanup of Streams Map (CVSS 5.3)
• CVE-2026-21435 — webtransport-go CloseWithError can block indefinitely (CVSS 7.5)
• CVE-2026-21434 — webtransport-go affected by Memory Exhaustion Attack due to Missing Length Check in WT_CLOSE_SESSION Capsule (CVSS 7.5)