Skip to content
OpenAdvisories

Package · Go

github.com/marten-seemann/webtransport-go

1 known vulnerabilities.

1 result · Feed

  • Medium 5.3

    webtransport-go affected by Memory Exhaustion Attack due to Missing Length Check in WT_CLOSE_SESSION Capsule

    webtransport-go is an implementation of the WebTransport protocol. From 0.3.0 to 0.9.0, an attacker can cause excessive memory consumption in webtransport-go's session implementation by sending a WT_CLOSE_SESSION capsule containing an excessively large Applic…