webtransport-go vulnerabilities

CVEs whose affected-version data names the webtransport-go package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-57497Medium· 5.3

1mo ago

webtransport-go is an implementation of the WebTransport protocol

webtransport-go is an implementation of the WebTransport protocol. Prior to 0.11.1, Session.parseNextCapsule() in session.go skips an unknown WebTransport capsule on the HTTP/3 request stream by calling io.ReadAll on the capsule reader, …

▾ Sunlitquic-go · webtransport-goEPSS 0.52%via NVD