{"action":"Upgrade quiche to 0.19.2 or later.","affected":[{"fixed":"0.19.2","introduced":"0"},{"fixed":"0.20.1","introduced":"0.20.0"}],"component":"quiche","cve_ids":["CVE-2024-1410"],"ecosystem":"crates.io","epss":0.00662,"exploited":false,"fixed_versions":["0.19.2","0.20.1"],"ghsa_id":"GHSA-xhg9-xwch-vr7x","id":"tcs_01M5KF4QWX5NTZSJ10ZQJ1DAHF","modified_at":"2026-07-08T06:52:55.490645239Z","published_at":"2024-03-13T15:38:21Z","references":["https://osv.dev/vulnerability/GHSA-xhg9-xwch-vr7x","https://github.com/cloudflare/quiche/security/advisories/GHSA-xhg9-xwch-vr7x","https://nvd.nist.gov/vuln/detail/CVE-2024-1410","https://github.com/cloudflare/quiche/commit/0c5733a84c41e9e178adc866b11ce59ac264f5af","https://github.com/cloudflare/quiche/commit/5be8143126f8cfa8a483d4a5ae475b9a46053fa1","https://github.com/cloudflare/quiche/commit/7ab42af5f5e97f20f1d63b7ea2f9ab0536678c40","https://github.com/cloudflare/quiche/commit/a983998c4408605905ee9a6ab0fc00e68436ac67","https://github.com/cloudflare/quiche","https://github.com/cloudflare/quiche/releases/tag/0.19.2","https://github.com/cloudflare/quiche/releases/tag/0.20.1"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-xhg9-xwch-vr7x","url":"https://osv.dev/vulnerability/GHSA-xhg9-xwch-vr7x"}],"summary":"quiche vulnerable to unbounded storage of information related to connection ID retirement"}