quinn-proto (crates.io)
Advisories
14
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 0.11.18 or later clears every advisory below that has a fix.
Upgrade commands
cargo
cargo update -p quinn-proto --precise 0.11.18Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| RUSTSEC-2026-0338 Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads |
Not rated yet | >= 0.7.0, < 0.11.18 | 0.11.18 |
| RUSTSEC-2026-0343 Outgoing datagram buffer accounting can panic the sender in quinn-proto |
High | >= 0.11.17, < 0.11.18 | 0.11.18 |
| RUSTSEC-2026-0340 Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled |
High | >= 0.11.0, < 0.11.18 | 0.11.18 |
| RUSTSEC-2026-0342 Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto |
Not rated yet | >= 0.5.0, < 0.11.17 | 0.11.17 |
| RUSTSEC-2026-0339 Unbounded growth of pending connection ID retirements in quinn-proto |
Not rated yet | >= 0.6.0, < 0.11.17 | 0.11.17 |
| RUSTSEC-2026-0341 Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed |
High | >= 0.11.15, < 0.11.17 | 0.11.17 |
| GHSA-4w2j-m93h-cj5j Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly |
High EPSS 0.84% |
>= 0.1.0, < 0.11.15 | 0.11.15 |
| GHSA-4w2j-m93h-cj5j Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly |
High EPSS 0.84% |
>= 0.0.0-0, < 0.11.15 | 0.11.15 |
| GHSA-6xvm-j4wr-6v98 Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing |
Medium EPSS 0.52% |
< 0.11.14 | 0.11.14 |
| GHSA-6xvm-j4wr-6v98 Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing |
Medium EPSS 0.52% |
>= 0.5.0, < 0.11.14 | 0.11.14 |
| GHSA-vr26-jcq5-fjj8 Denial of service in quinn-proto when using `Endpoint::retry()` |
High EPSS 0.57% |
>= 0.11.0, < 0.11.7 | 0.11.7 |
| GHSA-vr26-jcq5-fjj8 Denial of service in quinn-proto when using `Endpoint::retry()` |
High EPSS 0.57% |
>= 0.11.0, < 0.11.7 | 0.11.7 |
| GHSA-q8wc-j5m9-27w3 Denial of Service issue in quinn-proto |
High EPSS 0.94% |
< 0.9.5 | 0.9.5 |
| GHSA-q8wc-j5m9-27w3 Denial of Service issue in quinn-proto |
High EPSS 0.94% |
>= 0.0.0-0, < 0.9.5>= 0.10.0-0, < 0.10.5 | 0.9.50.10.5 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor