Rust advisories / crate
Security history · quinn-proto · data from Oct 24, 2026
Is quinn-proto safe to use? Its security history
VerdictNo open advisories. 10 past vulnerabilities were fixed; use 0.11.18 or newer to be clear of all of them.
10advisories on record
10vulnerabilities
0unmaintained notices
0.11.18newest fixed version
Every advisory, newest first
- VulnerabilityRUSTSEC-2026-0338 · 2026-09-14Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads
- Vulnerability HighRUSTSEC-2026-0340 · 2026-09-14Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled
- Vulnerability HighRUSTSEC-2026-0343 · 2026-09-14Outgoing datagram buffer accounting can panic the sender in quinn-proto
- VulnerabilityRUSTSEC-2026-0339 · 2026-08-17Unbounded growth of pending connection ID retirements in quinn-proto
- Vulnerability HighRUSTSEC-2026-0341 · 2026-08-17Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed
- VulnerabilityRUSTSEC-2026-0342 · 2026-08-17Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto
- Vulnerability HighRUSTSEC-2026-0185 · 2026-06-22 Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly
- VulnerabilityRUSTSEC-2026-0037 · 2026-03-09Denial of service in Quinn endpoints
- Vulnerability HighRUSTSEC-2024-0373 · 2024-09-02`Endpoint::retry()` calls can lead to panicking
- Vulnerability HighRUSTSEC-2023-0063 · 2023-09-21Denial of service in Quinn servers
Check your version
Run cargo tree -i quinn-proto to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.
Download trends, dependents and alternatives: quinn-proto crate data.
RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.
Up next
Before you depend on itquinn-proto crate dataReal downloads, dependents and alternatives.Read it next →Did this answer your question?