{"action":"Upgrade tech.kwik:kwik to 0.10.1 or later.","affected":[{"fixed":"0.10.1","introduced":"0"}],"component":"tech.kwik:kwik","cve_ids":["CVE-2025-23020"],"ecosystem":"Maven","epss":0.00579,"exploited":false,"fixed_versions":["0.10.1"],"ghsa_id":"GHSA-9f57-9rhg-4hvm","id":"tcs_01M5N8PVFVQSTNR37ZNFVCT8XF","modified_at":"2025-02-20T20:57:07.205105Z","published_at":"2025-02-20T03:32:03Z","references":["https://osv.dev/vulnerability/GHSA-9f57-9rhg-4hvm","https://nvd.nist.gov/vuln/detail/CVE-2025-23020","https://github.com/ptrd/kwik/commit/b0733d72bad76bc5d8df2f4a7792ebb2539ebdc8","https://github.com/ncc-pbottine/QUIC-Hash-Dos-Advisory","https://github.com/ptrd/kwik","https://github.com/ptrd/kwik/releases/tag/v0.10.1"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-9f57-9rhg-4hvm","url":"https://osv.dev/vulnerability/GHSA-9f57-9rhg-4hvm"}],"summary":"Kwik hash collision vulnerability"}