Maven/tech.kwik:kwik CVE-2025-23020: medium 5.3, EPSS 0.58%
Kwik hash collision vulnerability
Action: Upgrade tech.kwik:kwik to 0.10.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.10.1 | - |
Fixed versions
| 0.10.1 |
Sources
- osv: GHSA-9f57-9rhg-4hvm
- https://nvd.nist.gov/vuln/detail/CVE-2025-23020
- https://github.com/ptrd/kwik/commit/b0733d72bad76bc5d8df2f4a7792ebb2539ebdc8
- https://github.com/ncc-pbottine/QUIC-Hash-Dos-Advisory
- https://github.com/ptrd/kwik
- https://github.com/ptrd/kwik/releases/tag/v0.10.1
CVE-2025-23020 · published · modified · JSON