quinn-proto has 7 CVEs on record. Disclosure cadence is accelerating: 6 in the last 90 days against 1 in the 90 before. The busiest recent month was August 2026 with 3. The median CVSS is 7.5 (high). None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.5
- Publish → KEV
- —
- Last 90 days
- 6 prev 1
Weakness classes
Products
- quinn-proto 7
Worst active — by depth score
RUSTSEC-2026-0343High· 7.5Outgoing datagram buffer accounting can panic the sender in quinn-proto41RUSTSEC-2026-0340High· 7.5Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled41RUSTSEC-2026-0341High· 7.5Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed41GHSA-4w2j-m93h-cj5jHigh· 7.5Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly41RUSTSEC-2026-0338NoneRemote peer can panic quinn-proto with zero-length STREAM frames during unordered reads3
quinn-proto vulnerabilities
CVEs affecting quinn-proto, newest first. Open any entry for full detail, references, and exploit status.
7 CVEsRSS
RUSTSEC-2026-0343High· 7.5Outgoing datagram buffer accounting can panic the sender in quinn-proto
Outgoing datagram buffer accounting can panic the sender in quinn-proto
RUSTSEC-2026-0340High· 7.5Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled
Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled
RUSTSEC-2026-0338NoneRemote peer can panic quinn-proto with zero-length STREAM frames during unordered reads
Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads
RUSTSEC-2026-0342NoneZero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto
Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto
RUSTSEC-2026-0341High· 7.5Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed
Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed
RUSTSEC-2026-0339NoneUnbounded growth of pending connection ID retirements in quinn-proto
Unbounded growth of pending connection ID retirements in quinn-proto
GHSA-4w2j-m93h-cj5jHigh· 7.5Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly
Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly