VDB
GO-2026-4488
GO-2026-4488
PUBLISHED
webtransport-go: CloseWithError can block indefinitely in github.com/quic-go/webtransport-go
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | k3s-1.32 | 0, 0, 0 |
| chainguard | rke2-runtime-1.34 | 0, 0, 0 |
| wolfi | spegel | 0, 0, 0 |
| wolfi | k3s-1.32 | 0, 0, 0 |
| chainguard | rke2-runtime-1.35 | 0, 0, 0 |
| wolfi | k3s | 0, 0, 0 |
| chainguard | spegel | 0, 0, 0 |
| chainguard | ipfs-cluster | 0, 0, 0 |
| chainguard | rke2-runtime-1.32 | 0, 0, 0 |
| wolfi | kubo | 0, 0, 0 |
| chainguard | k3s | 0, 0, 0 |
| chainguard | rke2-runtime-1.33 | 0, 0, 0 |
| chainguard | k3s-1.33 | 0, 0, 0 |
| chainguard | spegel-fips | 0, 0, 0 |
| chainguard | k3s-1.31 | 0, 0, 0 |
| wolfi | ipfs-cluster | 0, 0, 0 |
| chainguard | ipfs-cluster-fips | 0, 0, 0 |
| chainguard | kubo | 0, 0, 0 |
| wolfi | k3s-1.33 | 0, 0, 0 |
| github.com | quic-go/webtransport-go | 0, 0 |
…and 1 more
Timeline
- Feb 17, 2026 CVE Published
- Feb 23, 2026 CVE Updated
- May 1, 2026 Security Advisory