Every CVE Search/ Get API key

CVE-2025-59530

quic-go has Client Crash Due to Premature HANDSHAKE_DONE Frame

7.5 HighFix available

quic-go is an implementation of the QUIC protocol in Go. In versions prior to 0.49.0, 0.54.1, and 0.55.0, a misbehaving or malicious server can cause a denial-of-service (DoS) attack on the quic-go client by triggering an assertion failure, leading to a process crash. This requires no authentication and can be exploited during the handshake phase. This was observed in the wild with certain server implementations. quic-go needs to be able to handle misbehaving server implementations, including those that prematurely send a HANDSHAKE_DONE frame. Versions 0.49.0, 0.54.1, and 0.55.0 discard Initial keys when receiving a HANDSHAKE_DONE frame, thereby correctly handling premature HANDSHAKE_DONE frames.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.46%Up 0.4 points since Oct 11, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.5

quic-go has Client Crash Due to Premature HANDSHAKE_DONE Frame

quic-go is an implementation of the QUIC protocol in Go. In versions prior to 0.49.0, 0.54.1, and 0.55.0, a misbehaving or malicious server can cause a denial-of-service (DoS) attack on the quic-go client by triggering an assertion failure, leading to a process crash. This requires no authentication and can be exploited during the handshake phase. This was observed in the wild with certain server implementations. quic-go needs to be able to handle misbehaving server implementations, including those that prematurely send a HANDSHAKE_DONE frame. Versions 0.49.0, 0.54.1, and 0.55.0 discard Initial keys when receiving a HANDSHAKE_DONE frame, thereby correctly handling premature HANDSHAKE_DONE frames.

Record
CVE-2025-59530
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-617, CWE-755
Updated
2026-11-02
EUVDEUVD-2025-33746 7.5

quic-go is an implementation of the QUIC protocol in Go. In versions prior to 0.49.0, 0.54.1, and 0.55.0, a misbehaving or malicious server can cause a denial-of-service (DoS) attack on the quic-go client by triggering an assertion failure, leading to a process crash. This requires no authentication and can be exploited during the handshake phase. This was observed in the wild with certain server implementations. quic-go needs to be able to handle misbehaving server implementations, including those that prematurely send a HANDSHAKE_DONE frame. Versions 0.49.0, 0.54.1, and 0.55.0 discard Initial keys when receiving a HANDSHAKE_DONE frame, thereby correctly handling premature HANDSHAKE_DONE frames.

Record
EUVD-2025-33746
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-47m2-4cr7-mhcw 7.5

quic-go: Panic occurs when queuing undecryptable packets after handshake completion

Summary

A misbehaving or malicious server can trigger an assertion in a quic-go client (and crash the process) by sending a premature HANDSHAKE_DONE frame during the handshake.

Impact

A misbehaving or malicious server can cause a denial-of-service (DoS) attack on the quic-go client by triggering an assertion failure, leading to a process crash. This requires no authentication and can be exploited during the handshake phase. Observed in the wild with certain server implementations (e.g. Solana's Firedancer QUIC).

Affected Versions

  • All versions prior to v0.49.1 (for the 0.49 branch)
  • Versions v0.50.0 to v0.54.0 (inclusive)
  • Fixed in v0.49.1, v0.54.1, and v0.55.0 onward

Users are recommended to upgrade to the latest patched version in their respective maintenance branch or to v0.55.0 or later.

Details

For a regular 1-RTT handshake, QUIC uses three sets of keys to encrypt / decrypt QUIC packets:

  • Initial keys (derived from a static key and the connection ID)
  • Handshake keys (derived from the client's and server's key shares in the TLS handshake)
  • 1-RTT keys (derived when the TLS handshake finishes)

On the client side, Initial keys are discarded when the first Handshake packet is sent. Handshake keys are discarded when the server's HANDSHAKE_DONE frame is received, as specified in section 4.9.2 of RFC 9001. Crucially, Initial keys are always dropped before Handshake keys in a standard handshake.

Due to packet reordering, it is possible to receive a packet with a higher encryption level before the key for that encryption level has been derived. For example, the server's Handshake packets (containing, among others, the TLS certificate) might arrive before the server's Initial packet (which contains the TLS ServerHello). In that case, the client queues the Handshake packets and decrypts them as soon as it has processed the ServerHello and derived Handshake keys.

After completion of the handshake, Initial and Handshake packets are not needed anymore and will be dropped. quic-go implements an assertion that no packets are queued after completion of the handshake.

A misbehaving or malicious server can trigger this assertion, and thereby cause a panic, by sending a HANDSHAKE_DONE frame before actually completing the handshake. In that case, Handshake keys would be dropped before Initial keys.

This can only happen if the server implementation is misbehaving: the server can only complete the handshake after receiving the client's TLS Finished message (which is sent in Handshake packets).

The Fix

quic-go needs to be able to handle misbehaving server implementations, including those that prematurely send a HANDSHAKE_DONE frame. We now discard Initial keys when receiving a HANDSHAKE_DONE frame, thereby correctly handling premature HANDSHAKE_DONE frames. The fix was implemented in https://github.com/quic-go/quic-go/pull/5354.

Record
GHSA-47m2-4cr7-mhcw
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-617, CWE-755
Updated
2026-11-02
NVD 7.5

quic-go is an implementation of the QUIC protocol in Go. In versions prior to 0.49.0, 0.54.1, and 0.55.0, a misbehaving or malicious server can cause a denial-of-service (DoS) attack on the quic-go client by triggering an assertion failure, leading to a process crash. This requires no authentication and can be exploited during the handshake phase. This was observed in the wild with certain server implementations. quic-go needs to be able to handle misbehaving server implementations, including those that prematurely send a HANDSHAKE_DONE frame. Versions 0.49.0, 0.54.1, and 0.55.0 discard Initial keys when receiving a HANDSHAKE_DONE frame, thereby correctly handling premature HANDSHAKE_DONE frames.

Record
CVE-2025-59530
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-617, CWE-755
Updated
2026-11-02
OSV 7.5

quic-go has Client Crash Due to Premature HANDSHAKE_DONE Frame

quic-go is an implementation of the QUIC protocol in Go. In versions prior to 0.49.0, 0.54.1, and 0.55.0, a misbehaving or malicious server can cause a denial-of-service (DoS) attack on the quic-go client by triggering an assertion failure, leading to a process crash. This requires no authentication and can be exploited during the handshake phase. This was observed in the wild with certain server implementations. quic-go needs to be able to handle misbehaving server implementations, including those that prematurely send a HANDSHAKE_DONE frame. Versions 0.49.0, 0.54.1, and 0.55.0 discard Initial keys when receiving a HANDSHAKE_DONE frame, thereby correctly handling premature HANDSHAKE_DONE frames.

Record
CVE-2025-59530
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-617, CWE-755
Updated
2026-11-02
OSVDEBIAN-CVE-2025-59530 7.5

quic-go is an implementation of the QUIC protocol in Go. In versions prior to 0.49.0, 0.54.1, and 0.55.0, a misbehaving or malicious server can cause a denial-of-service (DoS) attack on the quic-go client by triggering an assertion failure, leading to a process crash. This requires no authentication and can be exploited during the handshake phase. This was observed in the wild with certain server implementations. quic-go needs to be able to handle misbehaving server implementations, including those that prematurely send a HANDSHAKE_DONE frame. Versions 0.49.0, 0.54.1, and 0.55.0 discard Initial keys when receiving a HANDSHAKE_DONE frame, thereby correctly handling premature HANDSHAKE_DONE frames.

Record
DEBIAN-CVE-2025-59530
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 11 moreShow less
OSVGHSA-47m2-4cr7-mhcw 7.5

quic-go: Panic occurs when queuing undecryptable packets after handshake completion

Summary

A misbehaving or malicious server can trigger an assertion in a quic-go client (and crash the process) by sending a premature HANDSHAKE_DONE frame during the handshake.

Impact

A misbehaving or malicious server can cause a denial-of-service (DoS) attack on the quic-go client by triggering an assertion failure, leading to a process crash. This requires no authentication and can be exploited during the handshake phase. Observed in the wild with certain server implementations (e.g. Solana's Firedancer QUIC).

Affected Versions

  • All versions prior to v0.49.1 (for the 0.49 branch)
  • Versions v0.50.0 to v0.54.0 (inclusive)
  • Fixed in v0.49.1, v0.54.1, and v0.55.0 onward

Users are recommended to upgrade to the latest patched version in their respective maintenance branch or to v0.55.0 or later.

Details

For a regular 1-RTT handshake, QUIC uses three sets of keys to encrypt / decrypt QUIC packets:

  • Initial keys (derived from a static key and the connection ID)
  • Handshake keys (derived from the client's and server's key shares in the TLS handshake)
  • 1-RTT keys (derived when the TLS handshake finishes)

On the client side, Initial keys are discarded when the first Handshake packet is sent. Handshake keys are discarded when the server's HANDSHAKE_DONE frame is received, as specified in section 4.9.2 of RFC 9001. Crucially, Initial keys are always dropped before Handshake keys in a standard handshake.

Due to packet reordering, it is possible to receive a packet with a higher encryption level before the key for that encryption level has been derived. For example, the server's Handshake packets (containing, among others, the TLS certificate) might arrive before the server's Initial packet (which contains the TLS ServerHello). In that case, the client queues the Handshake packets and decrypts them as soon as it has processed the ServerHello and derived Handshake keys.

After completion of the handshake, Initial and Handshake packets are not needed anymore and will be dropped. quic-go implements an assertion that no packets are queued after completion of the handshake.

A misbehaving or malicious server can trigger this assertion, and thereby cause a panic, by sending a HANDSHAKE_DONE frame before actually completing the handshake. In that case, Handshake keys would be dropped before Initial keys.

This can only happen if the server implementation is misbehaving: the server can only complete the handshake after receiving the client's TLS Finished message (which is sent in Handshake packets).

The Fix

quic-go needs to be able to handle misbehaving server implementations, including those that prematurely send a HANDSHAKE_DONE frame. We now discard Initial keys when receiving a HANDSHAKE_DONE frame, thereby correctly handling premature HANDSHAKE_DONE frames. The fix was implemented in https://github.com/quic-go/quic-go/pull/5354.

Record
GHSA-47m2-4cr7-mhcw
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-617, CWE-755
Updated
2026-11-02
OSVRHSA-2025:21706 5.3

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

Record
RHSA-2025:21706
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRHSA-2025:21768 6.7

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

Record
RHSA-2025:21768
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:23069 8.3

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Record
RHSA-2025:23069
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2025-59530 7.5

quic-go is an implementation of the QUIC protocol in Go. In versions prior to 0.49.0, 0.54.1, and 0.55.0, a misbehaving or malicious server can cause a denial-of-service (DoS) attack on the quic-go client by triggering an assertion failure, leading to a process crash. This requires no authentication and can be exploited during the handshake phase. This was observed in the wild with certain server implementations. quic-go needs to be able to handle misbehaving server implementations, including those that prematurely send a HANDSHAKE_DONE frame. Versions 0.49.0, 0.54.1, and 0.55.0 discard Initial keys when receiving a HANDSHAKE_DONE frame, thereby correctly handling premature HANDSHAKE_DONE frames.

Record
UBUNTU-CVE-2025-59530
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-68778 No score

CVE-2025-59530 affecting package coredns for versions less than 1.11.4-11

quic-go is an implementation of the QUIC protocol in Go. In versions prior to 0.49.0, 0.54.1, and 0.55.0, a misbehaving or malicious server can cause a denial-of-service (DoS) attack on the quic-go client by triggering an assertion failure, leading to a process crash. This requires no authentication and can be exploited during the handshake phase. This was observed in the wild with certain server implementations. quic-go needs to be able to handle misbehaving server implementations, including those that prematurely send a HANDSHAKE_DONE frame. Versions 0.49.0, 0.54.1, and 0.55.0 discard Initial keys when receiving a HANDSHAKE_DONE frame, thereby correctly handling premature HANDSHAKE_DONE frames.

Record
AZL-68778
Updated
2026-11-05
OSVAZL-68781 No score

CVE-2025-59530 affecting package coredns for versions less than 1.11.1-24

quic-go is an implementation of the QUIC protocol in Go. In versions prior to 0.49.0, 0.54.1, and 0.55.0, a misbehaving or malicious server can cause a denial-of-service (DoS) attack on the quic-go client by triggering an assertion failure, leading to a process crash. This requires no authentication and can be exploited during the handshake phase. This was observed in the wild with certain server implementations. quic-go needs to be able to handle misbehaving server implementations, including those that prematurely send a HANDSHAKE_DONE frame. Versions 0.49.0, 0.54.1, and 0.55.0 discard Initial keys when receiving a HANDSHAKE_DONE frame, thereby correctly handling premature HANDSHAKE_DONE frames.

Record
AZL-68781
Updated
2026-11-02
OSVGO-2025-4017 No score

Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go

Record
GO-2025-4017
Updated
2026-11-02
OSVopenSUSE-SU-2025:15710-1 No score

govulncheck-vulndb-0.0.20251105T184115-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20251105T184115-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15710-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15737-1 No score

teleport-17.7.10-1.1 on GA media

These are all security issues fixed in the teleport-17.7.10-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15737-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21483-1 No score

Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues:

  • Update to version 0.0.20260723T184607 2026-07-23T18:46:07Z (jsc#PED-11136).

Go CVE Numbering Authority IDs added or updated with aliases:

  • GO-2026-4730 CVE-2026-33022 GHSA-cv4x-93xx-wgfj
  • GO-2026-4761 CVE-2026-33211 GHSA-j5q5-j9gm-2w5c
  • GO-2026-5102 CVE-2026-45021 GHSA-3vcp-chfh-f6r2
  • GO-2026-5272 CVE-2026-40938 GHSA-94jr-7pqp-xhcq
  • GO-2026-5486 CVE-2026-40924 GHSA-m2cx-gpqf-qf74
  • GO-2026-5542 CVE-2026-40090 GHSA-pj97-4p9w-gx3q
  • GO-2026-5630 CVE-2026-25542 GHSA-rmx9-2pp3-xhcr
  • GO-2026-5643 CVE-2026-40923 GHSA-rx35-6rhx-7858
  • GO-2026-5675 CVE-2026-41492 GHSA-vvf7-6rmr-m29q
  • GO-2026-5711 CVE-2026-40161 GHSA-wjxp-xrpv-xpff
  • GO-2026-5746 CVE-2026-41567 GHSA-x86f-5xw2-fm2r
  • GO-2026-5749 CVE-2026-41328 GHSA-x92x-px7w-4gx4
  • GO-2026-5837 CVE-2026-44840 GHSA-q2m9-6jp9-c6mc
  • GO-2026-5929 CVE-2026-44342 GHSA-26v7-h57m-gh9m
  • GO-2026-5930 CVE-2026-33655 GHSA-6qcr-qxgr-m7fv
  • GO-2026-5933 GHSA-3g4q-2f67-2gvh
  • GO-2026-5934 GHSA-59qp-cfj3-rp64
  • GO-2026-5935 GHSA-7856-g3gv-9wq8
  • GO-2026-5936 CVE-2026-53552 GHSA-26rh-24rg-j3vv
  • GO-2026-5937 CVE-2026-53508 GHSA-2jcc-mxv7-p3f9
  • GO-2026-5938 CVE-2026-53553 GHSA-4g5x-hcwm-82jw
  • GO-2026-5939 CVE-2026-10517 GHSA-698x-9w2p-7vvp
  • GO-2026-5940 CVE-2026-53572 GHSA-6w3m-4hhp-775q
  • GO-2026-5941 CVE-2026-53487 GHSA-gvhc-wv3v-7pf8
  • GO-2026-5942 CVE-2026-46600
  • GO-2026-5944 CVE-2026-50197 GHSA-659f-rgp5-w4wf
  • GO-2026-5945 CVE-2026-6815 GHSA-rmxx-v9rj-vpvg
  • GO-2026-5946 CVE-2026-52831 GHSA-v5px-423j-pf7p
  • GO-2026-5947 CVE-2026-53649 GHSA-xqhv-chqm-fhcc
  • GO-2026-5948 CVE-2026-50554 GHSA-588f-fvcv-xhvf
  • GO-2026-5949 CVE-2026-50553 GHSA-rqrh-8wpv-x7hh
  • GO-2026-5950 CVE-2026-53602 GHSA-339v-266x-79xr
  • GO-2026-5951 CVE-2026-10219 GHSA-6jm8-4fhr-5w64
  • GO-2026-5952 CVE-2026-49834 GHSA-9vcr-p3rj-q5q6
  • GO-2026-5953 CVE-2026-9094 GHSA-c9w5-qp6m-m395
  • GO-2026-5956 CVE-2026-55252 GHSA-h5g6-xmh4-hc37
  • GO-2026-5957 CVE-2026-54158 GHSA-5xfx-xj4h-5p7r
  • GO-2026-5958 CVE-2026-54068 GHSA-gcm7-57gf-953c
  • GO-2026-5959 CVE-2026-54072 GHSA-h29v-hj44-q8cv
  • GO-2026-5961 CVE-2026-54069 GHSA-hvr9-72v2-fff3
  • GO-2026-5962 CVE-2026-54088 GHSA-m93h-4hw7-5qcm
  • GO-2026-5963 CVE-2026-54067 GHSA-mvjr-vv3c-w4qv
  • GO-2026-5964 CVE-2026-54066 GHSA-p4m3-mgmm-c664
  • GO-2026-5965 CVE-2026-54070 GHSA-w7cg-whh7-xp28
  • GO-2026-5966 CVE-2026-54089 GHSA-xqp3-jq6g-x3qm
  • GO-2026-5967 CVE-2026-50551 GHSA-56mp-4f3v-fgj2
  • GO-2026-5968 CVE-2026-54174 GHSA-fpg8-7664-jc5q
  • GO-2026-5969 GHSA-g936-7jqj-mwv8
  • GO-2026-5970 CVE-2026-56852
  • GO-2026-5973 CVE-2026-54250 GHSA-jxr7-mqhw-9p98
  • GO-2026-5974 CVE-2026-44300 GHSA-wmj8-9953-vff5
  • GO-2026-5975 CVE-2026-50018 GHSA-42j2-w334-qxw7
  • GO-2026-5976 CVE-2026-50141 GHSA-g7mm-9vx7-jm7h
  • GO-2026-5977 CVE-2026-50013 GHSA-qrh4-p6v4-mrfg
  • GO-2026-5978 CVE-2026-50125 GHSA-qw5r-ppcg-f8rj
  • GO-2026-5979 CVE-2026-50006 GHSA-xrcf-6jh3-ggvx
  • GO-2026-5980 CVE-2026-50158 GHSA-2c7f-fxww-6w6c
  • GO-2026-5981 GHSA-mqxv-9rm6-w8qc
  • GO-2026-5982 GHSA-pqg7-v6wh-3pfp
  • GO-2026-5984 CVE-2026-53604 GHSA-2p2f-px33-4vv5
  • GO-2026-5985 GHSA-7rx3-5wx3-5v76
  • GO-2026-5986 CVE-2026-61699 GHSA-cm26-5974-52h8
  • GO-2026-5987 CVE-2026-55513 GHSA-g4x6-jcvr-9m3g
  • GO-2026-5988 CVE-2026-54628 GHSA-hwrq-8wxh-q4xv
  • GO-2026-5989 CVE-2026-55512 GHSA-m3cx-mwpg-32jg
  • GO-2026-5990 CVE-2026-54629 GHSA-mf78-3rpf-r784
  • GO-2026-5991 CVE-2026-53603 GHSA-q4vm-pq3q-8wgq
  • GO-2026-5992 CVE-2026-61549 GHSA-qf34-295c-26v8
  • GO-2026-5996 CVE-2026-54450 GHSA-pph6-vfjv-vpjw
  • GO-2026-5997 CVE-2026-54452 GHSA-xgch-x3mx-cm3c
  • GO-2026-5998 CVE-2026-54495 GHSA-398h-7f66-3h4p
  • GO-2026-5999 CVE-2026-10814 GHSA-jh6h-v6mp-h22v
  • GO-2026-6002 CVE-2026-58196 GHSA-pr64-jmmf-jp54
  • GO-2026-6003 CVE-2026-53714 GHSA-22xc-xg2r-9j7v
  • GO-2026-6004 CVE-2026-52833 GHSA-3v79-m2cg-89ww
  • GO-2026-6005 CVE-2026-53715 GHSA-8fv2-88gg-hm7q
  • GO-2026-6006 CVE-2026-53716 GHSA-cxpq-8v7q-cg56 *…
Record
openSUSE-SU-2026:21483-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
github.com/quic-go/quic-go
Go
before 0.49.1
0.49.1
github.com/quic-go/quic-go
Go
0.50.0 up to 0.54.1
0.54.1
coredns
Azure Linux:3
before 1.11.4-11
1.11.4-11
coredns
Azure Linux:2
before 1.11.1-24
1.11.1-24
golang-github-lucas-clemente-quic-go
Debian:12
All versions, plus listed versions
0.29.0-10.29.2-10.29.2-20.29.2-30.37.0-1
Show 19 moreShow less
0.37.4-10.37.4-1~bpo12+10.38.2-10.38.2-20.46.0-10.46.0-20.46.0-2~bpo12+10.50.0-10.50.1-10.50.1-20.54.0-10.54.0-20.54.0-30.54.1-10.55.0-10.59.0-10.59.0-20.59.0-2~bpo13+10.64.1-1
None known
golang-github-lucas-clemente-quic-go
Debian:13
All versions, plus listed versions
0.50.1-20.54.0-10.54.0-20.54.0-30.54.1-1
Show 5 moreShow less
0.55.0-10.59.0-10.59.0-20.59.0-2~bpo13+10.64.1-1
None known
golang-github-lucas-clemente-quic-go
Debian:14
before 0.54.1-1, plus listed versions
0.50.1-20.54.0-10.54.0-20.54.0-3
0.54.1-1
github.com/quic-go/quic-go
Go
before 0.49.1, 0.50.0 up to 0.54.1
0.49.10.54.1
receptor
Red Hat:ansible_automation_platform_developer:2.4::el8
before 0:1.6.2-1.el8ap
0:1.6.2-1.el8ap
receptorctl
Red Hat:ansible_automation_platform_developer:2.4::el8
before 0:1.6.2-1.el8ap
0:1.6.2-1.el8ap
Show 244 moreShow less
Affected packages
PackageAffectedFixed
receptor
Red Hat:ansible_automation_platform_inside:2.4::el8
before 0:1.6.2-1.el8ap
0:1.6.2-1.el8ap
receptorctl
Red Hat:ansible_automation_platform_inside:2.4::el8
before 0:1.6.2-1.el8ap
0:1.6.2-1.el8ap
receptor
Red Hat:ansible_automation_platform:2.4::el8
before 0:1.6.2-1.el8ap
0:1.6.2-1.el8ap
receptor-debuginfo
Red Hat:ansible_automation_platform:2.4::el8
before 0:1.6.2-1.el8ap
0:1.6.2-1.el8ap
receptor-debugsource
Red Hat:ansible_automation_platform:2.4::el8
before 0:1.6.2-1.el8ap
0:1.6.2-1.el8ap
receptorctl
Red Hat:ansible_automation_platform:2.4::el8
before 0:1.6.2-1.el8ap
0:1.6.2-1.el8ap
receptor
Red Hat:ansible_automation_platform_developer:2.4::el9
before 0:1.6.2-1.el9ap
0:1.6.2-1.el9ap
receptorctl
Red Hat:ansible_automation_platform_developer:2.4::el9
before 0:1.6.2-1.el9ap
0:1.6.2-1.el9ap
receptor
Red Hat:ansible_automation_platform_inside:2.4::el9
before 0:1.6.2-1.el9ap
0:1.6.2-1.el9ap
receptorctl
Red Hat:ansible_automation_platform_inside:2.4::el9
before 0:1.6.2-1.el9ap
0:1.6.2-1.el9ap
receptor
Red Hat:ansible_automation_platform:2.4::el9
before 0:1.6.2-1.el9ap
0:1.6.2-1.el9ap
receptor-debuginfo
Red Hat:ansible_automation_platform:2.4::el9
before 0:1.6.2-1.el9ap
0:1.6.2-1.el9ap
receptor-debugsource
Red Hat:ansible_automation_platform:2.4::el9
before 0:1.6.2-1.el9ap
0:1.6.2-1.el9ap
receptorctl
Red Hat:ansible_automation_platform:2.4::el9
before 0:1.6.2-1.el9ap
0:1.6.2-1.el9ap
automation-gateway-server
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 2 CVEs
before 0:2.6.20251119-1.el9ap
0:2.6.20251119-1.el9ap
receptor
Red Hat:ansible_automation_platform_developer:2.6::el9
From an advisory covering 2 CVEs
before 0:1.6.2-2.el9ap
0:1.6.2-2.el9ap
receptorctl
Red Hat:ansible_automation_platform_developer:2.6::el9
From an advisory covering 2 CVEs
before 0:1.6.2-2.el9ap
0:1.6.2-2.el9ap
receptor
Red Hat:ansible_automation_platform_inside:2.6::el9
From an advisory covering 2 CVEs
before 0:1.6.2-2.el9ap
0:1.6.2-2.el9ap
receptorctl
Red Hat:ansible_automation_platform_inside:2.6::el9
From an advisory covering 2 CVEs
before 0:1.6.2-2.el9ap
0:1.6.2-2.el9ap
receptor
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 2 CVEs
before 0:1.6.2-2.el9ap
0:1.6.2-2.el9ap
receptor-debuginfo
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 2 CVEs
before 0:1.6.2-2.el9ap
0:1.6.2-2.el9ap
receptor-debugsource
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 2 CVEs
before 0:1.6.2-2.el9ap
0:1.6.2-2.el9ap
receptorctl
Red Hat:ansible_automation_platform:2.6::el9
From an advisory covering 2 CVEs
before 0:1.6.2-2.el9ap
0:1.6.2-2.el9ap
ansible-builder
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:3.1.1-1.el8ap
0:3.1.1-1.el8ap
ansible-creator
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.0-1.el8ap
0:25.12.0-1.el8ap
ansible-dev-environment
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.2-1.1.el8ap
0:25.12.2-1.1.el8ap
ansible-dev-tools+server
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.0-1.el8ap
0:25.12.0-1.el8ap
ansible-dev-tools
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.0-1.el8ap
0:25.12.0-1.el8ap
ansible-lint
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.0-1.el8ap
0:25.12.0-1.el8ap
ansible-navigator
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.0-1.el8ap
0:25.12.0-1.el8ap
ansible-sign
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:0.1.4-1.el8ap
0:0.1.4-1.el8ap
bindep
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:2.13.0-1.el8ap
0:2.13.0-1.el8ap
molecule
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.0-1.el8ap
0:25.12.0-1.el8ap
python3.11-ansible-compat
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.0-1.el8ap
0:25.12.0-1.el8ap
python3.11-distlib
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:0.4.0-1.el8ap
0:0.4.0-1.el8ap
python3.11-django
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:4.2.26-1.el8ap
0:4.2.26-1.el8ap
python3.11-execnet
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:2.1.2-1.el8ap
0:2.1.2-1.el8ap
python3.11-gunicorn
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:23.0.0-1.el8ap
0:23.0.0-1.el8ap
python3.11-pluggy
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:1.6.0-1.el8ap
0:1.6.0-1.el8ap
python3.11-pytest
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:9.0.1-1.el8ap
0:9.0.1-1.el8ap
python3.11-pytest-ansible
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.0-1.el8ap
0:25.12.0-1.el8ap
python3.11-pytest-xdist
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:3.8.0-1.el8ap
0:3.8.0-1.el8ap
python3.11-ruamel-yaml-clib
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:0.2.15-1.el8ap
0:0.2.15-1.el8ap
python3.11-ruamel-yaml-clib-debuginfo
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:0.2.15-1.el8ap
0:0.2.15-1.el8ap
python3.11-ruamel-yaml-clib-debugsource
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:0.2.15-1.el8ap
0:0.2.15-1.el8ap
python3.11-subprocess-tee
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:0.4.2-1.el8ap
0:0.4.2-1.el8ap
python3.11-tox-ansible
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.0-1.2.el8ap
0:25.12.0-1.2.el8ap
python3.11-typing-extensions
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:4.15.0-1.el8ap
0:4.15.0-1.el8ap
ansible-builder
Red Hat:ansible_automation_platform_inside:2.5::el8
From an advisory covering 6 CVEs
before 0:3.1.1-1.el8ap
0:3.1.1-1.el8ap
ansible-lint
Red Hat:ansible_automation_platform_inside:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.0-1.el8ap
0:25.12.0-1.el8ap
ansible-navigator
Red Hat:ansible_automation_platform_inside:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.0-1.el8ap
0:25.12.0-1.el8ap
ansible-sign
Red Hat:ansible_automation_platform_inside:2.5::el8
From an advisory covering 6 CVEs
before 0:0.1.4-1.el8ap
0:0.1.4-1.el8ap
bindep
Red Hat:ansible_automation_platform_inside:2.5::el8
From an advisory covering 6 CVEs
before 0:2.13.0-1.el8ap
0:2.13.0-1.el8ap
python3.11-ansible-compat
Red Hat:ansible_automation_platform_inside:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.0-1.el8ap
0:25.12.0-1.el8ap
python3.11-distlib
Red Hat:ansible_automation_platform_inside:2.5::el8
From an advisory covering 6 CVEs
before 0:0.4.0-1.el8ap
0:0.4.0-1.el8ap
python3.11-ruamel-yaml-clib
Red Hat:ansible_automation_platform_inside:2.5::el8
From an advisory covering 6 CVEs
before 0:0.2.15-1.el8ap
0:0.2.15-1.el8ap
python3.11-ruamel-yaml-clib-debuginfo
Red Hat:ansible_automation_platform_inside:2.5::el8
From an advisory covering 6 CVEs
before 0:0.2.15-1.el8ap
0:0.2.15-1.el8ap
python3.11-ruamel-yaml-clib-debugsource
Red Hat:ansible_automation_platform_inside:2.5::el8
From an advisory covering 6 CVEs
before 0:0.2.15-1.el8ap
0:0.2.15-1.el8ap
python3.11-subprocess-tee
Red Hat:ansible_automation_platform_inside:2.5::el8
From an advisory covering 6 CVEs
before 0:0.4.2-1.el8ap
0:0.4.2-1.el8ap
python3.11-typing-extensions
Red Hat:ansible_automation_platform_inside:2.5::el8
From an advisory covering 6 CVEs
before 0:4.15.0-1.el8ap
0:4.15.0-1.el8ap
ansible-builder
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:3.1.1-1.el8ap
0:3.1.1-1.el8ap
ansible-creator
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.0-1.el8ap
0:25.12.0-1.el8ap
ansible-dev-environment
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.2-1.1.el8ap
0:25.12.2-1.1.el8ap
ansible-dev-tools+server
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.0-1.el8ap
0:25.12.0-1.el8ap
ansible-dev-tools
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.0-1.el8ap
0:25.12.0-1.el8ap
ansible-lint
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.0-1.el8ap
0:25.12.0-1.el8ap
ansible-navigator
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.0-1.el8ap
0:25.12.0-1.el8ap
ansible-sign
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:0.1.4-1.el8ap
0:0.1.4-1.el8ap
automation-eda-controller
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:1.1.14-1.el8ap
0:1.1.14-1.el8ap
automation-eda-controller-base
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:1.1.14-1.el8ap
0:1.1.14-1.el8ap
automation-eda-controller-base-services
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:1.1.14-1.el8ap
0:1.1.14-1.el8ap
automation-eda-controller-event-stream-services
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:1.1.14-1.el8ap
0:1.1.14-1.el8ap
automation-eda-controller-worker-services
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:1.1.14-1.el8ap
0:1.1.14-1.el8ap
automation-hub
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:4.10.10-1.el8ap
0:4.10.10-1.el8ap
bindep
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:2.13.0-1.el8ap
0:2.13.0-1.el8ap
molecule
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.0-1.el8ap
0:25.12.0-1.el8ap
python3.11-ansible-compat
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.0-1.el8ap
0:25.12.0-1.el8ap
python3.11-distlib
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:0.4.0-1.el8ap
0:0.4.0-1.el8ap
python3.11-django
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:4.2.26-1.el8ap
0:4.2.26-1.el8ap
python3.11-execnet
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:2.1.2-1.el8ap
0:2.1.2-1.el8ap
python3.11-galaxy-importer
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:0.4.36-2.el8ap
0:0.4.36-2.el8ap
python3.11-galaxy-ng
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:4.10.10-1.el8ap
0:4.10.10-1.el8ap
python3.11-gunicorn
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:23.0.0-1.el8ap
0:23.0.0-1.el8ap
python3.11-pluggy
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:1.6.0-1.el8ap
0:1.6.0-1.el8ap
python3.11-pytest
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:9.0.1-1.el8ap
0:9.0.1-1.el8ap
python3.11-pytest-ansible
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.0-1.el8ap
0:25.12.0-1.el8ap
python3.11-pytest-xdist
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:3.8.0-1.el8ap
0:3.8.0-1.el8ap
python3.11-ruamel-yaml-clib
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:0.2.15-1.el8ap
0:0.2.15-1.el8ap
python3.11-ruamel-yaml-clib-debuginfo
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:0.2.15-1.el8ap
0:0.2.15-1.el8ap
python3.11-ruamel-yaml-clib-debugsource
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:0.2.15-1.el8ap
0:0.2.15-1.el8ap
python3.11-subprocess-tee
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:0.4.2-1.el8ap
0:0.4.2-1.el8ap
python3.11-tox-ansible
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:25.12.0-1.2.el8ap
0:25.12.0-1.2.el8ap
python3.11-typing-extensions
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:4.15.0-1.el8ap
0:4.15.0-1.el8ap
ansible-builder
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:3.1.1-1.el9ap
0:3.1.1-1.el9ap
ansible-creator
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.0-1.el9ap
0:25.12.0-1.el9ap
ansible-dev-environment
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.2-1.1.el9ap
0:25.12.2-1.1.el9ap
ansible-dev-tools+server
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.0-1.el9ap
0:25.12.0-1.el9ap
ansible-dev-tools
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.0-1.el9ap
0:25.12.0-1.el9ap
ansible-lint
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.0-1.el9ap
0:25.12.0-1.el9ap
ansible-navigator
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.0-1.el9ap
0:25.12.0-1.el9ap
ansible-sign
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:0.1.4-1.el9ap
0:0.1.4-1.el9ap
bindep
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:2.13.0-1.el9ap
0:2.13.0-1.el9ap
molecule
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.0-1.el9ap
0:25.12.0-1.el9ap
python3.11-ansible-compat
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.0-1.el9ap
0:25.12.0-1.el9ap
python3.11-distlib
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:0.4.0-1.el9ap
0:0.4.0-1.el9ap
python3.11-django
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:4.2.26-1.el9ap
0:4.2.26-1.el9ap
python3.11-execnet
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:2.1.2-1.el9ap
0:2.1.2-1.el9ap
python3.11-gunicorn
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:23.0.0-1.el9ap
0:23.0.0-1.el9ap
python3.11-pluggy
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:1.6.0-1.el9ap
0:1.6.0-1.el9ap
python3.11-pytest
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:9.0.1-1.el9ap
0:9.0.1-1.el9ap
python3.11-pytest-ansible
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.0-1.el9ap
0:25.12.0-1.el9ap
python3.11-pytest-xdist
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:3.8.0-1.el9ap
0:3.8.0-1.el9ap
python3.11-ruamel-yaml-clib
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:0.2.15-1.el9ap
0:0.2.15-1.el9ap
python3.11-ruamel-yaml-clib-debuginfo
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:0.2.15-1.el9ap
0:0.2.15-1.el9ap
python3.11-ruamel-yaml-clib-debugsource
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:0.2.15-1.el9ap
0:0.2.15-1.el9ap
python3.11-subprocess-tee
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:0.4.2-1.el9ap
0:0.4.2-1.el9ap
python3.11-tox-ansible
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.0-1.2.el9ap
0:25.12.0-1.2.el9ap
python3.11-typing-extensions
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:4.15.0-1.el9ap
0:4.15.0-1.el9ap
ansible-builder
Red Hat:ansible_automation_platform_inside:2.5::el9
From an advisory covering 6 CVEs
before 0:3.1.1-1.el9ap
0:3.1.1-1.el9ap
ansible-lint
Red Hat:ansible_automation_platform_inside:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.0-1.el9ap
0:25.12.0-1.el9ap
ansible-navigator
Red Hat:ansible_automation_platform_inside:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.0-1.el9ap
0:25.12.0-1.el9ap
ansible-sign
Red Hat:ansible_automation_platform_inside:2.5::el9
From an advisory covering 6 CVEs
before 0:0.1.4-1.el9ap
0:0.1.4-1.el9ap
bindep
Red Hat:ansible_automation_platform_inside:2.5::el9
From an advisory covering 6 CVEs
before 0:2.13.0-1.el9ap
0:2.13.0-1.el9ap
python3.11-ansible-compat
Red Hat:ansible_automation_platform_inside:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.0-1.el9ap
0:25.12.0-1.el9ap
python3.11-distlib
Red Hat:ansible_automation_platform_inside:2.5::el9
From an advisory covering 6 CVEs
before 0:0.4.0-1.el9ap
0:0.4.0-1.el9ap
python3.11-ruamel-yaml-clib
Red Hat:ansible_automation_platform_inside:2.5::el9
From an advisory covering 6 CVEs
before 0:0.2.15-1.el9ap
0:0.2.15-1.el9ap
python3.11-ruamel-yaml-clib-debuginfo
Red Hat:ansible_automation_platform_inside:2.5::el9
From an advisory covering 6 CVEs
before 0:0.2.15-1.el9ap
0:0.2.15-1.el9ap
python3.11-ruamel-yaml-clib-debugsource
Red Hat:ansible_automation_platform_inside:2.5::el9
From an advisory covering 6 CVEs
before 0:0.2.15-1.el9ap
0:0.2.15-1.el9ap
python3.11-subprocess-tee
Red Hat:ansible_automation_platform_inside:2.5::el9
From an advisory covering 6 CVEs
before 0:0.4.2-1.el9ap
0:0.4.2-1.el9ap
python3.11-typing-extensions
Red Hat:ansible_automation_platform_inside:2.5::el9
From an advisory covering 6 CVEs
before 0:4.15.0-1.el9ap
0:4.15.0-1.el9ap
ansible-builder
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:3.1.1-1.el9ap
0:3.1.1-1.el9ap
ansible-creator
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.0-1.el9ap
0:25.12.0-1.el9ap
ansible-dev-environment
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.2-1.1.el9ap
0:25.12.2-1.1.el9ap
ansible-dev-tools+server
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.0-1.el9ap
0:25.12.0-1.el9ap
ansible-dev-tools
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.0-1.el9ap
0:25.12.0-1.el9ap
ansible-lint
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.0-1.el9ap
0:25.12.0-1.el9ap
ansible-navigator
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.0-1.el9ap
0:25.12.0-1.el9ap
ansible-sign
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:0.1.4-1.el9ap
0:0.1.4-1.el9ap
automation-eda-controller
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:1.1.14-1.el9ap
0:1.1.14-1.el9ap
automation-eda-controller-base
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:1.1.14-1.el9ap
0:1.1.14-1.el9ap
automation-eda-controller-base-services
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:1.1.14-1.el9ap
0:1.1.14-1.el9ap
automation-eda-controller-event-stream-services
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:1.1.14-1.el9ap
0:1.1.14-1.el9ap
automation-eda-controller-worker-services
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:1.1.14-1.el9ap
0:1.1.14-1.el9ap
automation-hub
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:4.10.10-1.el9ap
0:4.10.10-1.el9ap
bindep
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:2.13.0-1.el9ap
0:2.13.0-1.el9ap
molecule
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.0-1.el9ap
0:25.12.0-1.el9ap
python3.11-ansible-compat
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.0-1.el9ap
0:25.12.0-1.el9ap
python3.11-distlib
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:0.4.0-1.el9ap
0:0.4.0-1.el9ap
python3.11-django
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:4.2.26-1.el9ap
0:4.2.26-1.el9ap
python3.11-execnet
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:2.1.2-1.el9ap
0:2.1.2-1.el9ap
python3.11-galaxy-importer
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:0.4.36-2.el9ap
0:0.4.36-2.el9ap
python3.11-galaxy-ng
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:4.10.10-1.el9ap
0:4.10.10-1.el9ap
python3.11-gunicorn
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:23.0.0-1.el9ap
0:23.0.0-1.el9ap
python3.11-pluggy
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:1.6.0-1.el9ap
0:1.6.0-1.el9ap
python3.11-pytest
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:9.0.1-1.el9ap
0:9.0.1-1.el9ap
python3.11-pytest-ansible
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.0-1.el9ap
0:25.12.0-1.el9ap
python3.11-pytest-xdist
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:3.8.0-1.el9ap
0:3.8.0-1.el9ap
python3.11-ruamel-yaml-clib
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:0.2.15-1.el9ap
0:0.2.15-1.el9ap
python3.11-ruamel-yaml-clib-debuginfo
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:0.2.15-1.el9ap
0:0.2.15-1.el9ap
python3.11-ruamel-yaml-clib-debugsource
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:0.2.15-1.el9ap
0:0.2.15-1.el9ap
python3.11-subprocess-tee
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:0.4.2-1.el9ap
0:0.4.2-1.el9ap
python3.11-tox-ansible
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:25.12.0-1.2.el9ap
0:25.12.0-1.2.el9ap
python3.11-typing-extensions
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:4.15.0-1.el9ap
0:4.15.0-1.el9ap
automation-gateway-server
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el8ap
0:2.5.20251210-1.el8ap
automation-gateway-server
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el9ap
0:2.5.20251210-1.el9ap
receptor
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:1.6.2-1.el8ap
0:1.6.2-1.el8ap
receptor
Red Hat:ansible_automation_platform_inside:2.5::el8
From an advisory covering 6 CVEs
before 0:1.6.2-1.el8ap
0:1.6.2-1.el8ap
receptor
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:1.6.2-1.el8ap
0:1.6.2-1.el8ap
receptor-debuginfo
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:1.6.2-1.el8ap
0:1.6.2-1.el8ap
receptor-debugsource
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:1.6.2-1.el8ap
0:1.6.2-1.el8ap
receptor
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:1.6.2-1.el9ap
0:1.6.2-1.el9ap
receptor
Red Hat:ansible_automation_platform_inside:2.5::el9
From an advisory covering 6 CVEs
before 0:1.6.2-1.el9ap
0:1.6.2-1.el9ap
receptor
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:1.6.2-1.el9ap
0:1.6.2-1.el9ap
receptor-debuginfo
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:1.6.2-1.el9ap
0:1.6.2-1.el9ap
receptor-debugsource
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:1.6.2-1.el9ap
0:1.6.2-1.el9ap
ansible-runner
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:2.4.2-1.el8ap
0:2.4.2-1.el8ap
automation-controller
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:4.6.23-1.el8ap
0:4.6.23-1.el8ap
automation-controller-cli
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:4.6.23-1.el8ap
0:4.6.23-1.el8ap
python3.11-ansible-runner
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:2.4.2-1.el8ap
0:2.4.2-1.el8ap
receptorctl
Red Hat:ansible_automation_platform_developer:2.5::el8
From an advisory covering 6 CVEs
before 0:1.6.2-1.el8ap
0:1.6.2-1.el8ap
ansible-runner
Red Hat:ansible_automation_platform_inside:2.5::el8
From an advisory covering 6 CVEs
before 0:2.4.2-1.el8ap
0:2.4.2-1.el8ap
python3.11-ansible-runner
Red Hat:ansible_automation_platform_inside:2.5::el8
From an advisory covering 6 CVEs
before 0:2.4.2-1.el8ap
0:2.4.2-1.el8ap
receptorctl
Red Hat:ansible_automation_platform_inside:2.5::el8
From an advisory covering 6 CVEs
before 0:1.6.2-1.el8ap
0:1.6.2-1.el8ap
ansible-automation-platform-installer
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:2.5-20.el8ap
0:2.5-20.el8ap
ansible-runner
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:2.4.2-1.el8ap
0:2.4.2-1.el8ap
automation-controller
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:4.6.23-1.el8ap
0:4.6.23-1.el8ap
automation-controller-cli
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:4.6.23-1.el8ap
0:4.6.23-1.el8ap
automation-controller-fapolicyd
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:1.0-5.el8ap
0:1.0-5.el8ap
automation-controller-server
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:4.6.23-1.el8ap
0:4.6.23-1.el8ap
automation-controller-ui
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:4.6.23-1.el8ap
0:4.6.23-1.el8ap
automation-controller-venv-tower
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:4.6.23-1.el8ap
0:4.6.23-1.el8ap
automation-gateway
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el8ap
0:2.5.20251210-1.el8ap
automation-gateway-config
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el8ap
0:2.5.20251210-1.el8ap
python3.11-ansible-runner
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:2.4.2-1.el8ap
0:2.4.2-1.el8ap
python3.11-django-ansible-base+activitystream
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el8ap
0:2.5.20251210-1.el8ap
python3.11-django-ansible-base+api_documentation
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el8ap
0:2.5.20251210-1.el8ap
python3.11-django-ansible-base+authentication
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el8ap
0:2.5.20251210-1.el8ap
python3.11-django-ansible-base+channel_auth
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el8ap
0:2.5.20251210-1.el8ap
python3.11-django-ansible-base+feature_flags
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el8ap
0:2.5.20251210-1.el8ap
python3.11-django-ansible-base+jwt_consumer
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el8ap
0:2.5.20251210-1.el8ap
python3.11-django-ansible-base+oauth2_provider
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el8ap
0:2.5.20251210-1.el8ap
python3.11-django-ansible-base+rbac
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el8ap
0:2.5.20251210-1.el8ap
python3.11-django-ansible-base+redis_client
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el8ap
0:2.5.20251210-1.el8ap
python3.11-django-ansible-base+rest_filters
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el8ap
0:2.5.20251210-1.el8ap
python3.11-django-ansible-base
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el8ap
0:2.5.20251210-1.el8ap
receptorctl
Red Hat:ansible_automation_platform:2.5::el8
From an advisory covering 6 CVEs
before 0:1.6.2-1.el8ap
0:1.6.2-1.el8ap
ansible-runner
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:2.4.2-1.el9ap
0:2.4.2-1.el9ap
automation-controller
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:4.6.23-1.el9ap
0:4.6.23-1.el9ap
automation-controller-cli
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:4.6.23-1.el9ap
0:4.6.23-1.el9ap
python3.11-ansible-runner
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:2.4.2-1.el9ap
0:2.4.2-1.el9ap
receptorctl
Red Hat:ansible_automation_platform_developer:2.5::el9
From an advisory covering 6 CVEs
before 0:1.6.2-1.el9ap
0:1.6.2-1.el9ap
ansible-runner
Red Hat:ansible_automation_platform_inside:2.5::el9
From an advisory covering 6 CVEs
before 0:2.4.2-1.el9ap
0:2.4.2-1.el9ap
python3.11-ansible-runner
Red Hat:ansible_automation_platform_inside:2.5::el9
From an advisory covering 6 CVEs
before 0:2.4.2-1.el9ap
0:2.4.2-1.el9ap
receptorctl
Red Hat:ansible_automation_platform_inside:2.5::el9
From an advisory covering 6 CVEs
before 0:1.6.2-1.el9ap
0:1.6.2-1.el9ap
ansible-automation-platform-installer
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:2.5-20.el9ap
0:2.5-20.el9ap
ansible-runner
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:2.4.2-1.el9ap
0:2.4.2-1.el9ap
automation-controller
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:4.6.23-1.el9ap
0:4.6.23-1.el9ap
automation-controller-cli
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:4.6.23-1.el9ap
0:4.6.23-1.el9ap
automation-controller-fapolicyd
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:1.0-5.el9ap
0:1.0-5.el9ap
automation-controller-server
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:4.6.23-1.el9ap
0:4.6.23-1.el9ap
automation-controller-ui
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:4.6.23-1.el9ap
0:4.6.23-1.el9ap
automation-controller-venv-tower
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:4.6.23-1.el9ap
0:4.6.23-1.el9ap
automation-gateway
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el9ap
0:2.5.20251210-1.el9ap
automation-gateway-config
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el9ap
0:2.5.20251210-1.el9ap
python3.11-ansible-runner
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:2.4.2-1.el9ap
0:2.4.2-1.el9ap
python3.11-django-ansible-base+activitystream
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el9ap
0:2.5.20251210-1.el9ap
python3.11-django-ansible-base+api_documentation
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el9ap
0:2.5.20251210-1.el9ap
python3.11-django-ansible-base+authentication
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el9ap
0:2.5.20251210-1.el9ap
python3.11-django-ansible-base+channel_auth
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el9ap
0:2.5.20251210-1.el9ap
python3.11-django-ansible-base+feature_flags
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el9ap
0:2.5.20251210-1.el9ap
python3.11-django-ansible-base+jwt_consumer
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el9ap
0:2.5.20251210-1.el9ap
python3.11-django-ansible-base+oauth2_provider
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el9ap
0:2.5.20251210-1.el9ap
python3.11-django-ansible-base+rbac
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el9ap
0:2.5.20251210-1.el9ap
python3.11-django-ansible-base+redis_client
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el9ap
0:2.5.20251210-1.el9ap
python3.11-django-ansible-base+rest_filters
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el9ap
0:2.5.20251210-1.el9ap
python3.11-django-ansible-base
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:2.5.20251210-1.el9ap
0:2.5.20251210-1.el9ap
receptorctl
Red Hat:ansible_automation_platform:2.5::el9
From an advisory covering 6 CVEs
before 0:1.6.2-1.el9ap
0:1.6.2-1.el9ap
golang-github-lucas-clemente-quic-go
Ubuntu:22.04:LTS
All versions, plus listed versions
0.18.0-30.24.0-10.25.0-1
None known
golang-github-lucas-clemente-quic-go
Ubuntu:24.04:LTS
All versions, plus listed versions
0.37.4-10.38.2-1
None known
golang-github-lucas-clemente-quic-go
Ubuntu:25.10
All versions, plus listed versions
0.50.0-10.50.1-2
None known
golang-github-lucas-clemente-quic-go
Ubuntu:26.04:LTS
All versions, plus listed versions
0.50.1-20.59.0-2
None known
govulncheck-vulndb
openSUSE:Tumbleweed
From an advisory covering 70 CVEs
before 0.0.20251105T184115-1.1
0.0.20251105T184115-1.1
teleport
openSUSE:Tumbleweed
before 17.7.10-1.1
17.7.10-1.1
govulncheck-vulndb
openSUSE:Leap 16.0
From an advisory covering 1734 CVEs
before 0.0.20260723T184607-160000.1.1
0.0.20260723T184607-160000.1.1

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-59530 is a high vulnerability (CVSS 7.5) in Quic-go, published October 10, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.46%, the 40th percentile. Fixed in github.com/quic-go/quic-go 0.49.1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,584 references and the rest of 1 source description. The JSON record has them.

MoveEnter Open