{"action":"Upgrade quiche to 0.19.2 or later.","affected":[{"fixed":"0.19.2","introduced":"0"},{"fixed":"0.20.1","introduced":"0.20.0"}],"component":"quiche","cve_ids":["CVE-2024-1765"],"ecosystem":"crates.io","epss":0.0111,"exploited":false,"fixed_versions":["0.19.2","0.20.1"],"ghsa_id":"GHSA-78wx-jg4j-5j6g","id":"tcs_01M5KEV4152QCQM84KKG20TFS0","modified_at":"2026-07-08T06:27:52.494427826Z","published_at":"2024-03-13T15:39:40Z","references":["https://osv.dev/vulnerability/GHSA-78wx-jg4j-5j6g","https://github.com/cloudflare/quiche/security/advisories/GHSA-78wx-jg4j-5j6g","https://nvd.nist.gov/vuln/detail/CVE-2024-1765","https://github.com/cloudflare/quiche/commit/1017466c143fc93a82b286a1ba35e53334cdf8e2","https://github.com/cloudflare/quiche/commit/11dbf5461ab657bbc02e466d719070124b27ef3c","https://github.com/cloudflare/quiche","https://github.com/cloudflare/quiche/releases/tag/0.19.2","https://github.com/cloudflare/quiche/releases/tag/0.20.1"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-78wx-jg4j-5j6g","url":"https://osv.dev/vulnerability/GHSA-78wx-jg4j-5j6g"}],"summary":"quiche vulnerable to unlimited resource allocation by QUIC CRYPTO frames flooding"}