MEDIUM5.3Go
GHSA-2f2x-8mwp-p2gc· CVE-2026-21438, GO-2026-4483webtransport-go: Memory Exhaustion Attack due to Missing Cleanup of Streams Map
Modified: 9/10/2026
package
Go/github.com/quic-go/webtransport-go
pkg:go/github.com/quic-go/webtransport-go
MEDIUM5.3Go
GHSA-g35j-m5xg-vh3q· CVE-2026-57497, GO-2026-6099webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules
Modified: 9/10/2026
MEDIUM5.3Go
GHSA-g6x7-jq8p-6q9q· CVE-2026-21434, GO-2026-4485webtransport-go: Memory Exhaustion Attack due to Missing Length Check in WT_CLOSE_SESSION Capsule
Modified: 9/10/2026
MEDIUM5.3Go
GHSA-px4r-g4p3-hhqv· CVE-2026-21435, GO-2026-4488webtransport-go: CloseWithError can block indefinitely
Modified: 9/10/2026
—Go
GO-2026-4483· CVE-2026-21438, GHSA-2f2x-8mwp-p2gcwebtransport-go: Memory Exhaustion Attack due to Missing Cleanup of Streams Map in github.com/quic-go/webtransport-go
Modified: 2/23/2026
—Go
GO-2026-4485· CVE-2026-21434, GHSA-g6x7-jq8p-6q9qwebtransport-go: Memory Exhaustion Attack due to Missing Length Check in WT_CLOSE_SESSION Capsule in github.com/quic-go/webtransport-go
Modified: 2/23/2026
—Go
GO-2026-4488· CVE-2026-21435, GHSA-px4r-g4p3-hhqvwebtransport-go: CloseWithError can block indefinitely in github.com/quic-go/webtransport-go
Modified: 2/23/2026
—Go
GO-2026-6099· CVE-2026-57497, GHSA-g35j-m5xg-vh3qwebtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules in github.com/quic-go/webtransport-go
Modified: 8/18/2026