GO-2026-4488

Affected Products

Timeline

• Feb 17, 2026 CVE Published
• Feb 23, 2026 CVE Updated
• May 1, 2026 Security Advisory

References

• https://github.com/quic-go/webtransport-go/security/advisories/GHSA-px4r-g4p3-hhqv advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-21435 advisory
• https://github.com/quic-go/webtransport-go/releases/tag/v0.10.0 fix