apernet has 3 CVEs on record. The busiest recent month was June 2026 with 3. The median CVSS is 7.5 (high). Most affected products: github.com/apernet/hysteria (2), github.com/apernet/hysteria/core/v2 (1).
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.5
- Publish → KEV
- —
- Last 90 days
- 0 prev 3
Products
- github.com/apernet/hysteria 2
- github.com/apernet/hysteria/core/v2 1
3
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
GHSA-vgrc-hq28-p3xpHigh· 7.4Hysteria has an authenticated UDP ACL bypass that enables localhost and private-network UDP SSRF41GHSA-qh5x-rfwf-rvfvHigh· 7.5Hysteria vulnerable to server crash when max_datagram_frame_size very small41GHSA-jqc5-2p7q-fqfcHigh· 7.5Hysteria: http large header with sniff cause server DoS41
apernet vulnerabilities
CVEs affecting apernet, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
GHSA-vgrc-hq28-p3xpHigh· 7.4Hysteria has an authenticated UDP ACL bypass that enables localhost and private-network UDP SSRF
Hysteria has an authenticated UDP ACL bypass that enables localhost and private-network UDP SSRF
▾ Twilightapernet · github.com/apernet/hysteria/core/v2via GHSA
GHSA-qh5x-rfwf-rvfvHigh· 7.5Hysteria vulnerable to server crash when max_datagram_frame_size very small
Hysteria vulnerable to server crash when max_datagram_frame_size very small
▾ Twilightapernet · github.com/apernet/hysteriavia GHSA
GHSA-jqc5-2p7q-fqfcHigh· 7.5Hysteria: http large header with sniff cause server DoS
Hysteria: http large header with sniff cause server DoS
▾ Twilightapernet · github.com/apernet/hysteriavia GHSA