CVE-2026-91095

The proxygen framework, versions v2024.10.28.00 through v2026.09.28.00 , contains a memory safety vulnerability. The HTTPTransaction::onWebTransportUniStream and HTTPTransaction::onWebTransportBidiStream APIs may return stream handles that the stream handler has already freed. Consequently, HQSes...