VDB
Sign up

package

Go/github.com/apernet/hysteria/core

pkg:go/github.com/apernet/hysteria/core

—Go
GO-2026-5288· GHSA-9fw6-xgg2-mq9q

Hysteria: A specially constructed quic package can crash the server OOM when the sniff is enabled in github.com/apernet/hysteria/core

Modified: 6/25/2026

—Go
GO-2026-5809· GHSA-vgrc-hq28-p3xp

Hysteria has an authenticated UDP ACL bypass that enables localhost and private-network UDP SSRF in github.com/apernet/hysteria/core

Modified: 7/7/2026