VULNRABLE / Vulnerability / CVE-2026-57497
CVE-2026-57497
MEDIUM LOW github.com/quic-go/webtransport-go GHSA
Exploit verdict: No active-exploit signal
CVSS Score
5.5
Severity
MEDIUM
EPSS
—
Source
GHSA
Summary
webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules
What this means
CVE-2026-57497 is a medium-severity vulnerability affecting github.com/quic-go/webtransport-go, rated CVSS 5.5. Published July 25, 2026.
View full advisory at GHSA →