VYPR

QuicheQuicServerCodec

by Quiche

CVEs (1)

  • CVE-2026-44894higJun 8, 2026
    risk 0.45cvss epss

    NoQuicTokenHandler is the tokenHandler used when the application does not set one. Its writeToken() returns false (server will not send Retry — acceptable), but validateToken() unconditionally `return 0`. In QuicheQuicServerCodec.handlePacket(), a non-negative return from…