Quic-go
Security Risk Profile
35
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 8 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 2, 2024 to present
8
Total CVEs
5
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
6.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
35/100
low
Severity Distribution
Critical
0High
5Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
No CWE data available
Most Affected Products
1. Quic-go quic-go6
2. go/github.com/quic-go/webtransport-go3
3. Quic-go Webtransport-go Go3
4. go/github.com/quic-go/quic-go3
5. Microsoft cbl2 coredns 1.11.1-221
Recent Vulnerabilities
See more →REDHAT-BUG-2484875
CVSS 7.0high
6/4/2026🔧 No Patch
CVE-2026-21438
CVSS 5.3medium
webtransport-go affected by a Memory Exhaustion Attack due to Missing Cleanup of Streams Map
2/12/2026
CVE-2026-21435
CVSS 7.5high
webtransport-go CloseWithError can block indefinitely
2/12/2026
CVE-2026-21434
CVSS 7.5high
webtransport-go affected by Memory Exhaustion Attack due to Missing Length Check in WT_CLOSE_SESSION Capsule
2/12/2026
REDHAT-BUG-2403125
CVSS 4.0medium
10/10/2025🔧 No Patch
CVE-2025-59530
CVSS 7.5high
quic-go has Client Crash Due to Premature HANDSHAKE_DONE Frame
10/10/2025
CVE-2025-29785
CVSS 7.5high
quic-go Has Panic in Path Probe Loss Recovery Handling
6/2/2025
REDHAT-BUG-2329991
CVSS 4.0medium
12/2/2024🔧 No Patch
Monitor Quic-go in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.