49 matches found
EUVD-2025-4585
Malicious code in bioql PyPI...
EUVD-2024-20124
Malicious code in bioql PyPI...
EUVD-2024-1823
Malicious code in bioql PyPI...
Directory Traversal
Overview kwik is a Fast, batteries-included, business-oriented, opinionated REST APIs framework Affected versions of this package are vulnerable to Directory Traversal via the kwik.utils.files.storefile function due to improper validation of directory containment in the file upload helper, which...
CVE-2025-23020
An issue was discovered in Kwik before 0.10.1. A hash collision vulnerability in the hash table used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections with colliding Source Connection IDs SCIDs...
Kwik hash collision vulnerability
An issue was discovered in Kwik before 0.10.1. A hash collision vulnerability in the hash table used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections with colliding Source Connection IDs SCIDs...
GHSA-9F57-9RHG-4HVM Kwik hash collision vulnerability
An issue was discovered in Kwik before 0.10.1. A hash collision vulnerability in the hash table used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections with colliding Source Connection IDs SCIDs...
CVE-2025-23020
An issue was discovered in Kwik before 0.10.1. A hash collision vulnerability in the hash table used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections with colliding Source Connection IDs SCIDs...
Inefficient Algorithmic Complexity
Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity through the hash table used to manage connections. An attacker can cause a considerable CPU load on the server by initiating connections with colliding Source Connection IDs SCIDs. Remediation Upgrade...
com.github.zhkl0228:netguard (>=0.0.5, <=0.0.6), org.jam4s:jam4s-quic-cli_3 (0.0.1) +7 more potentially affected by CVE-2025-23020 via tech.kwik:kwik (>=0.8.3, <=0.10)
tech.kwik:kwik MAVEN version =0.8.3, =0.0.5, =0.5.2, =0.8.12, =0.8.12, =0.8.12, =0.8.12, =0.8.12, =0.10 Source cves: CVE-2025-23020 Source advisory: SNYK:JAVA-TECHKWIK-8744684...
CVE-2025-23020
An issue was discovered in Kwik before 0.10.1. A hash collision vulnerability in the hash table used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections with colliding Source Connection IDs SCIDs...
CVE-2025-23020
CVE-2025-23020 describes a hash collision vulnerability in Kwik before 0.10.1. The issue arises in the hash table used to manage connections, allowing remote attackers to induce a Hash DoS by sending connections with colliding Source Connection IDs, causing considerable CPU load. Affected softwar...
com.github.zhkl0228:netguard (>=0.0.5, <=0.0.6), org.jam4s:jam4s-quic-cli_3 (0.0.1) +7 more potentially affected by CVE-2025-23020 via tech.kwik:kwik (>=0.8.3, <=0.10)
tech.kwik:kwik MAVEN version =0.8.3, =0.0.5, =0.5.2, =0.8.12, =0.8.12, =0.8.12, =0.8.12, =0.8.12, =0.10 Source cves: CVE-2025-23020 Source advisory: MEND:CVE-2025-23020...
CVE-2025-23020: Inefficient Algorithmic Complexity
An issue was discovered in Kwik before 0.10.1. A hash collision vulnerability in the hash table used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections with colliding Source Connection IDs SCIDs...
Kwik security vulnerabilities
Kwik is a client and server that implements the QUIC protocol RFC 9000 by the individual developer Peter Doornbosch in the Netherlands. A security vulnerability exists in Kwik prior to version 0.10.1, which stems from the inclusion of a hash conflict vulnerability. A remote attacker could exploit...
CVE-2025-23020
An issue was discovered in Kwik before 0.10.1. A hash collision vulnerability in the hash table used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections with colliding Source Connection IDs SCIDs...
PT-2025-7544 · Kwik · Kwik
Name of the Vulnerable Software and Affected Versions: Kwik versions prior to 0.10.1 Description: A hash collision vulnerability in the hash table used to manage connections allows remote attackers to cause a considerable CPU load on the server by initiating connections with colliding Source...
CVE-2025-23020
An issue was discovered in Kwik before 0.10.1. A hash collision vulnerability in the hash table used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections with colliding Source Connection IDs SCIDs...
CVE-2025-23020
An issue was discovered in Kwik before 0.10.1. A hash collision vulnerability in the hash table used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections with colliding Source Connection IDs SCIDs...