Alpine/kubo: high 7.5
quic-go is an implementation of the QUIC protocol in Go. Prior to version 0.42.0, an attacker can cause its peer to run out of memory sending a large number of `NEW_CONNECTION_ID` frames that retire o
Action: Upgrade kubo to 0.28.0-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.28.0-r0 | - |
Fixed versions
| 0.28.0-r0 |
Sources
published · modified · JSON