{"id":"GO-2025-4233","revision":"f29c3c73e7ac43ff8a0b302d837b0865","records":[{"revision":"f29c3c73e7ac43ff8a0b302d837b0865","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4233","aliases":["CVE-2025-64702","GHSA-g754-hx8w-x2g6"],"title":"HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go","description":"HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go","state":0,"publishedAt":"2025-12-15T20:37:41+00:00","modifiedAt":"2026-02-04T03:42:03.713204+00:00","affected":[{"ecosystem":"Go","name":"github.com/quic-go/quic-go","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.57.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/quic-go/quic-go/security/advisories/GHSA-g754-hx8w-x2g6","https://github.com/quic-go/quic-go/commit/5b2d2129f8315da41e01eff0a847ab38a34e83a8"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4233","license":"OSV · upstream source license applies","key":"osv:GO-2025-4233","identifiers":["GO-2025-4233","CVE-2025-64702","GHSA-g754-hx8w-x2g6"]},"retained":false,"historicalAffected":[]}],"coverage":[]}