| CVE-2026-91096 |
In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams…
|
7.5
High
|
Sep 28, 2026 |
| CVE-2026-91095 |
In proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransaction::onWebTransportUniStream and…
|
5.3
Medium
|
Sep 28, 2026 |
| CVE-2026-84895 |
In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after…
|
7.3
High
|
Sep 28, 2026 |
| CVE-2026-44909 |
Proxygen lacked a generalized slow-consumer detection mechanism in its core HTTP session layer
|
7.5
High
|
Jul 23, 2026 |
| CVE-2025-55181 |
Sending an HTTP request/response body with greater than 2^31 bytes triggers an infinite loop in…
|
5.3
Medium
|
Dec 2, 2025 |
| CVE-2021-24029 |
A packet of death scenario is possible in mvfst via a specially crafted message during a QUIC session, which causes a…
|
Not rated
|
Mar 15, 2021 |
| CVE-2020-1897 |
A use-after-free is possible due to an error in lifetime management in the request adaptor when a malicious client…
|
Not rated
|
May 18, 2020 |
| CVE-2019-11940 |
In the course of decompressing HPACK inside the HTTP2 protocol, an unexpected sequence of header table resize operations…
|
Not rated
|
Dec 4, 2019 |
| CVE-2019-11921 |
An out of bounds write is possible via a specially crafted packet in certain configurations of Proxygen due to…
|
Not rated
|
Jul 25, 2019 |
| CVE-2018-6347 |
An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack
|
7.5
High
|
Dec 31, 2018 |
| CVE-2018-6346 |
A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings (specifically a circular…
|
7.5
High
|
Dec 31, 2018 |
| CVE-2018-6343 |
Proxygen fails to validate that a secondary auth manager is set before dereferencing it
|
7.5
High
|
Dec 31, 2018 |