Executive brief
Hysteria: A specially constructed quic package can crash the server OOM when the sniff is enabled
Affected products
- Go github.com/apernet/hysteria/core/v2
Junglewise Threat Intelligence
Hysteria: A specially constructed quic package can crash the server OOM when the sniff is enabled
Severity: low · CVSS 3.1 · Published 2026-05-05
Technologies: github.com/apernet/hysteria/core/v2 (Go). Vendors: Go.
Related threats
- GO-2026-5809 - Hysteria has an authenticated UDP ACL bypass that enables localhost and private-network UDP SSRF in github.com/apernet/hysteria/core
- Hysteria has an authenticated UDP ACL bypass that enables localhost and private-network UDP SSRF
- apernet Hysteria UDP ACL bypass and SSRF
- GO-2026-5288 - Hysteria: A specially constructed quic package can crash the server OOM when the sniff is enabled in github.com/apernet/hysteria/core