Quinn-rs vulnerabilities
We track 3 vulnerabilities in Quinn-rs products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 23, 2026.
Latest Quinn-rs vulnerabilities
- 7.5 High severity
quinn: Allocation of Resources Without Limits or Throttling
Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Starting in version 0.1.0 and prior to version 0.11.15, the `Assembler` component that assembles unordered stream fragments into consecutive chunks of the stream incurs
- 7.5 High severity
quinn: Always-Incorrect Control Flow Implementation
Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. As of quinn-proto 0.11, it is possible for a server to `accept()`, `retry()`, `refuse()`, or `ignore()` an `Incoming` connection. However, calling `retry()` on an unvali
- 7.5 High severity
quinn-proto is a state machine for the QUIC transport protocol.
quinn-proto is a state machine for the QUIC transport protocol. Prior to versions 0.9.5 and 0.10.5, receiving unknown QUIC frames in a QUIC packet could result in a panic. The problem has been fixed in 0.9.5 and 0.10.5 maintenance releases.