{"action":"Upgrade quinn-proto to 0.11.14 or later.","affected":[{"fixed":"0.11.14","introduced":"0.5.0"}],"component":"quinn-proto","cve_ids":["CVE-2026-31812"],"ecosystem":"crates.io","epss":0.0052,"exploited":false,"fixed_versions":["0.11.14"],"ghsa_id":"GHSA-6xvm-j4wr-6v98","id":"tcs_01M5KFAWZJDZ0HXVGQZ6E5CM3Z","modified_at":"2026-03-14T07:30:14.675976Z","published_at":"2026-03-09T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2026-0037","https://crates.io/crates/quinn-proto","https://rustsec.org/advisories/RUSTSEC-2026-0037.html","https://github.com/quinn-rs/quinn/pull/2559"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"RUSTSEC-2026-0037","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0037"},{"source":"nvd","source_id":"CVE-2026-31812","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31812"}],"summary":"Denial of service in Quinn endpoints"}