Quic-go Webtransport-go — known CVE vulnerabilities

Every CVE whose affected-product data names Quic-go Webtransport-go, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2026-21434 — CVSS 5.3 (medium): webtransport-go is an implementation of the WebTransport protocol. From 0.3.0 to 0.9.0, an attacker can cause excessive memory consumption…
• CVE-2026-21435 — CVSS 5.3 (medium): webtransport-go is an implementation of the WebTransport protocol. Prior to v0.10.0, an attacker can cause a denial of service in…
• CVE-2026-21438 — CVSS 5.3 (medium): webtransport-go is an implementation of the WebTransport protocol. Prior to 0.10.0, an attacker can cause unbounded memory consumption…