—Go
GO-2026-5288· GHSA-9fw6-xgg2-mq9qHysteria: A specially constructed quic package can crash the server OOM when the sniff is enabled in github.com/apernet/hysteria/core
Modified: 6/25/2026
package
pkg:go/github.com/apernet/hysteria/core
Hysteria: A specially constructed quic package can crash the server OOM when the sniff is enabled in github.com/apernet/hysteria/core
Modified: 6/25/2026
Hysteria has an authenticated UDP ACL bypass that enables localhost and private-network UDP SSRF in github.com/apernet/hysteria/core
Modified: 7/7/2026