https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T11:40:38.007242+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-161633 EUVD-2026-161633 2026-10-07T11:40:38.010548+00:00 EUVD-2026-161633 https://cve.radiocsirt.org/vuln/fkie_cve-2023-46239 fkie_cve-2023-46239 2026-10-07T11:40:38.010581+00:00

quic-go is an implementation of the QUIC protocol in Go. Starting in version 0.37.0 and prior to version 0.37.3, by serializing an ACK frame after the CRYTPO that allows a node to complete the handshake, a remote node could trigger a nil pointer dereference (leading to a panic) when the node attempted to drop the Handshake packet number space. An attacker can bring down a quic-go node with very minimal effort. Completing the QUIC handshake only requires sending and receiving a few packets. Version 0.37.3 contains a patch. Versions before 0.37.0 are not affected.

 https://cve.radiocsirt.org/vuln/ghsa-3q6m-v84f-6p9h GHSA-3q6m-v84f-6p9h — quic-go vulnerable to pointer dereference that can lead to panic 2026-10-07T11:40:38.010622+00:00

Affected: Go: github.com/quic-go/quic-go

quic-go is an implementation of the [QUIC](https://datatracker.ietf.org/doc/html/rfc9000) transport protocol in Go. By serializing an ACK frame after the CRYTPO that allows a node to complete the handshake, a remote node could trigger a nil pointer dereference (leading to a panic) when the node attempted to drop the Handshake packet number space.

**Impact**

An attacker can bring down a quic-go node with very minimal effort. Completing the QUIC handshake only requires sending and receiving a few packets.

**Patches**

[v0.37.3](https://github.com/quic-go/quic-go/releases/tag/v0.37.3) contains a patch. Versions before v0.37.0 are not affected.

 https://cve.radiocsirt.org/vuln/gsd-2023-46239 gsd-2023-46239 2026-10-07T11:40:38.010653+00:00 gsd-2023-46239 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-46239 UBUNTU-CVE-2023-46239 2026-10-07T11:40:38.010665+00:00

Affected: Ubuntu:22.04:LTS: golang-github-lucas-clemente-quic-go, Ubuntu:24.04:LTS: golang-github-lucas-clemente-quic-go, Ubuntu:25.10: golang-github-lucas-clemente-quic-go, Ubuntu:26.04:LTS: golang-github-lucas-clemente-quic-go

quic-go is an implementation of the QUIC protocol in Go. Starting in version 0.37.0 and prior to version 0.37.3, by serializing an ACK frame after the CRYTPO that allows a node to complete the handshake, a remote node could trigger a nil pointer dereference (leading to a panic) when the node attempted to drop the Handshake packet number space. An attacker can bring down a quic-go node with very minimal effort. Completing the QUIC handshake only requires sending and receiving a few packets. Version 0.37.3 contains a patch. Versions before 0.37.0 are not affected.