github.com/apernet/hysteria/core vulnerabilities (Go)

2 vulnerabilities.

• github.com/apernet/hysteria/core Go Hysteria has an authenticated UDP ACL bypass that enables localhost and private-network UDP SSRF GHSA-vgrc-hq28-p3xp Fix available 7.4 HighJune 26, 2026
• github.com/apernet/hysteria/core Go Hysteria: A specially constructed quic package can crash the server OOM when the sniff is enabled GHSA-9fw6-xgg2-mq9q 8.8 HighMay 5, 2026