Executive brief
Hysteria: A specially constructed quic package can crash the server OOM when the sniff is enabled in github.com/apernet/hysteria/core
Affected products
- Go github.com/apernet/hysteria/core
- Go github.com/apernet/hysteria/core/v2
Junglewise Threat Intelligence
GO-2026-5288 - Hysteria: A specially constructed quic package can crash the server OOM when the sniff is enabled in github.com/apernet/hysteria/core
Severity: info · Published 2026-06-25
Technologies: github.com/apernet/hysteria/core/v2 (Go). Vendors: Go.
Related threats
- GO-2026-5809 - Hysteria has an authenticated UDP ACL bypass that enables localhost and private-network UDP SSRF in github.com/apernet/hysteria/core
- Hysteria has an authenticated UDP ACL bypass that enables localhost and private-network UDP SSRF
- apernet Hysteria UDP ACL bypass and SSRF
- Hysteria: A specially constructed quic package can crash the server OOM when the sniff is enabled