—
GO-2025-4017
Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go
Details
Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/quic-go/quic-go
Introduced in:
0 Fixed in: 0.49.1 Fix
go get github.com/quic-go/quic-go@v0.49.1 References
- https://github.com/quic-go/quic-go/security/advisories/GHSA-47m2-4cr7-mhcw [ADVISORY]
- https://github.com/quic-go/quic-go/commit/bc5bccf10fd02728eef150683eb4dfaa5c0e749c [FIX]
- https://github.com/quic-go/quic-go/commit/ce7c9ea8834b9d2ed79efa9269467f02c0895d42 [FIX]
- https://github.com/quic-go/quic-go/pull/5354 [FIX]
- https://github.com/quic-go/quic-go/blob/v0.55.0/connection.go#L2682-L2685 [WEB]