Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 2 total.
CVE-2026-44435
HIGH
CVSS 7.5
Verified Advisory
Jul 16, 2026
Denial-of-service in Quicly QUIC protocol implementation (CVE-2026-44435)
Quicly, an IETF QUIC protocol implementation for use within the H2O HTTP server, contains a denial-of-service vulnerability in which an assertion failure is raised when the total number of valid handshake messages rec...
Fixed in commit 8b178e6 and above
Denial Of Service
Quicly
CVE-2026-44436
HIGH
CVSS 7.5
Verified Advisory
Jul 16, 2026
Denial of Service in Quicly (CVE-2026-44436)
CVE-2026-44436 is a Denial of Service vulnerability in Quicly, an IETF QUIC protocol implementation used primarily within the H2O HTTP server. The library's packet decoder accepts Connection IDs of up to 255 bytes whi...
Fixed in commit 8b178e6 and above
Denial Of Service
Buffer Overflow
Quicly