CVE-2026-12708 Unbounded HTTP/3 Datagram flow map growth in tokio-quiche

Summary Cloudflare tokio-quiche was found to contain an uncontrolled resource consumption vulnerability in its HTTP/3 DATAGRAM handling. For every previously unseen flow identifier quarter stream ID received in a DATAGRAM frame, tokio-quiche creates and retains new, per-flow state. A remote peer...