EUVD-2026-88545

In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams WebTransportImpl::destroy in releases before v2025.08.18.00 failed to unregister read callbacks for streams that were no longer open before destroying them. The transport could then invoke a read...

CVE-2026-91096

The proxygen library (versions v2024.10.28.00 through v2026.09.28.00 ) contains a vulnerability where WebTransportImpl::terminateSessionStreams (or WebTransportImpl::destroy in releases before v2025.08.18.00 ) fails to unregister read callbacks for streams that are no longer open prior to destruc...