HIGH8.8Go
GHSA-9fw6-xgg2-mq9q· GO-2026-5288Hysteria: A specially constructed quic package can crash the server OOM when the sniff is enabled
Modified: 6/25/2026
package
Go/github.com/apernet/hysteria/core/v2
pkg:go/github.com/apernet/hysteria/core/v2
HIGH7.4Go
GHSA-vgrc-hq28-p3xp· GO-2026-5809Hysteria has an authenticated UDP ACL bypass that enables localhost and private-network UDP SSRF
Modified: 7/7/2026
—Go
GO-2026-5288· GHSA-9fw6-xgg2-mq9qHysteria: A specially constructed quic package can crash the server OOM when the sniff is enabled in github.com/apernet/hysteria/core
Modified: 6/25/2026
—Go
GO-2026-5809· GHSA-vgrc-hq28-p3xpHysteria has an authenticated UDP ACL bypass that enables localhost and private-network UDP SSRF in github.com/apernet/hysteria/core
Modified: 7/7/2026