https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T04:43:35.238565+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-42805 CVE-2023-42805 — quinn-proto Denial of Service vulnerability 2026-10-08T04:43:35.240267+00:00

Affected: quinn-rs quinn, quinn_project quinn

quinn-proto is a state machine for the QUIC transport protocol. Prior to versions 0.9.5 and 0.10.5, receiving unknown QUIC frames in a QUIC packet could result in a panic. The problem has been fixed in 0.9.5 and 0.10.5 maintenance releases.

 https://cve.radiocsirt.org/vuln/ghsa-q8wc-j5m9-27w3 GHSA-q8wc-j5m9-27w3 — Denial of Service issue in quinn-proto 2026-10-08T04:43:35.240341+00:00

Affected: crates.io: quinn-proto

### Impact

Receiving unknown QUIC frames in a QUIC packet could result in a panic.

### Patches

The problem has been fixed in 0.9.5 and 0.10.5 maintenance releases.

### References

Fixed in https://github.com/quinn-rs/quinn/pull/1667, backported in https://github.com/quinn-rs/quinn/pull/1668 and https://github.com/quinn-rs/quinn/pull/1669.