CVE-2025-7054
1 advisory.
crates.io/quiche CVE-2025-7054: high, EPSS 0.40%
quiche connection ID retirement can trigger an infinite loop
Action: Upgrade quiche to 0.24.5 or later.
cargo update -p quiche --precise 0.24.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.15.0 | 0.24.5 | - |
Fixed versions
| 0.24.5 |
Sources
- osv: GHSA-m3hh-f9gh-74c2
- https://github.com/cloudflare/quiche/security/advisories/GHSA-m3hh-f9gh-74c2
- https://nvd.nist.gov/vuln/detail/CVE-2025-7054
- https://github.com/cloudflare/quiche
CVE-2025-7054 · published · modified · JSON