CVE-2026-115482
- Source
- https://cve.org/CVERecord?id=CVE-2026-115482
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-115482.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-115482
- Published
- 2026-10-22T15:07:30Z
- Modified
- 2026-10-28T10:46:14Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
In lsquic before 4.9.0, the HTTP/3 implementation can use an excessive amount of memory because the number of buffered header sets is not limited, as demonstrated by a QPACK amplification attack. This is related to header_out_dynamic_entry and es_max_header_list_size.
- Database specific
{ "cna_assigner": "mitre", "cwe_ids": [ "CWE-770" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/115xxx/CVE-2026-115482.json" }- References
-
- https://github.com/litespeedtech/lsquic/compare/v4.8.2...v4.9.0
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/115xxx/CVE-2026-115482.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-115482
- https://github.com/litespeedtech/lsquic/pull/666
- https://foxio.io/blog/header-accordions-qpack-amplification-attacks-against-http-3-servers
Affected packages
Git / github.com/litespeedtech/lsquic
Affected ranges
- Type
- GIT
- Repo
- https://github.com/litespeedtech/lsquic
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "0" }, { "fixed": "4.9.0" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "introduced": "0" }, { "fixed": "4.9.0" } ], "source": "DESCRIPTION" } ] }
Affected versions
1.*
1.11.0
1.11.1
1.12.0
1.12.2
1.12.3
1.12.4
1.13.0
1.14.0
1.14.3
1.15.0
1.16.0
1.17.0
1.17.10
1.17.11
1.17.12
1.17.14
1.17.15
1.17.2
1.17.3
1.17.6
1.17.7
1.17.8
1.17.9
1.18.0
1.19.1
1.19.2
1.19.4
1.19.5
1.19.6
1.20.0
1.21.1
1.21.2
v.*
v.2.12.4
v.2.20.1
v1.*
v1.0
v1.1
v1.10
v1.10.1
v1.10.2
v1.2
v2.*
v2.10.0
v2.10.1
v2.10.3
v2.10.4
v2.10.5
v2.10.6
v2.11.1
v2.12.0
v2.13.0
v2.13.1
v2.13.2
v2.13.3
v2.14.0
v2.14.1
v2.14.2
v2.14.3
v2.14.4
v2.14.5
v2.14.6
v2.14.7
v2.14.8
v2.15.0
v2.16.0
v2.16.1
v2.16.2
v2.16.3
v2.17.0
v2.17.1
v2.17.2
v2.18.0
v2.18.1
v2.18.2
v2.19.0
v2.19.1
v2.19.10
v2.19.2
v2.19.3
v2.19.4
v2.19.5
v2.19.6
v2.19.7
v2.19.8
v2.2.0
v2.20.0
v2.20.2
v2.21.0
v2.22.0
v2.22.1
v2.23.1
v2.23.2
v2.23.3
v2.24.0
v2.24.1
v2.24.2
v2.24.3
v2.24.4
v2.24.5
v2.25.0
v2.26.0
v2.26.1
v2.26.2
v2.27.0
v2.27.1
v2.27.2
v2.27.3
v2.27.4
v2.27.5
v2.27.6
v2.28.0
v2.29.0
v2.29.1
v2.29.2
v2.29.3
v2.29.4
v2.29.5
v2.29.6
v2.3.0
v2.3.1
v2.30.0
v2.30.1
v2.30.2
v2.4.0
v2.4.1
v2.4.10
v2.4.2
v2.4.3
v2.4.4
v2.4.6
v2.4.7
v2.4.8
v2.5.0
v2.5.1
v2.5.2
v2.6.0
v2.6.1
v2.6.2
v2.6.3
v2.6.5
v2.6.6
v2.6.7
v2.7.0
v2.7.1
v2.7.2
v2.7.3
v2.8.0
v2.8.1
v2.8.2
v2.8.3
v2.8.5
v2.8.7
v2.8.8
v2.8.9
v2.9.0
v3.*
v3.0.0
v3.0.1
v3.0.2
v3.0.3
v3.0.4
v3.1.0
v3.1.1
v3.1.2
v3.1.3
v3.2.0
v3.3.0
v3.3.1
v4.*
v4.0.0
v4.0.1
v4.0.11
v4.0.12
v4.0.2
v4.0.3
v4.0.4
v4.0.5
v4.0.6
v4.0.7
v4.0.8
v4.0.9
v4.1.0
v4.2.0
v4.3.0
v4.3.1
v4.3.2
v4.4.0
v4.4.1
v4.4.2
v4.5.0
v4.6.0
v4.6.1
v4.6.2
v4.6.3
v4.6.4
v4.7.0
v4.7.1
v4.7.2
v4.8.0
v4.8.1
v4.8.2
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-115482.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"function_hash": "112494323144522847590743938517256805633",
"length": 157
},
"id": "CVE-2026-115482-254d5c3c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "src/liblsquic/lsquic_full_conn_ietf.c",
"function": "ietf_full_conn_ci_packet_sent_pre_hsk"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "123499730003889980142234352938056181016",
"length": 961
},
"id": "CVE-2026-115482-2f7aa66b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "tests/test_send_headers.c",
"function": "test_multiple_hsets_fifo"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "179446952887425164666461312381498213226",
"length": 2097
},
"id": "CVE-2026-115482-39e32c48",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "tests/test_send_headers.c",
"function": "init_test_objs"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "19066399651810020737844132980702841342",
"length": 4642
},
"id": "CVE-2026-115482-3ea4e5c1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "src/liblsquic/lsquic_stream.c",
"function": "hq_read"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"56757861736596952318527850408172588103",
"299484051976307062564934546902043999638",
"84064208074058505498717807249262647165",
"249487923676630527862564704384341096893",
"92714217070196084053935838164657356767",
"5749057334003721886405543492379542996",
"98257496371280310546421246371148921909",
"171877325748439459859976071885603455802",
"239837189335003224478122127686190839129",
"302932338702416325259016836863409215170",
"75672328993993829370253756855299203319",
"160746623712559420824178214858566912104",
"306401811562654370016195837066667833874",
"58980311107342330615808054741779663482",
"103766544300861543002578818208457440609",
"312323940164586331790598396021638998514",
"240883381634873263738042068571565380623",
"312428419288088464469405235869213782867",
"10905477680032683149306936953391113919",
"147582041891940982101057862747422385854",
"297310667591232204209401226173332900787",
"3226085034694858189324131266348137002",
"115422714599519148441570228502476720283",
"237347987846349814942853983314127042928",
"7875491852371637665181326193692142351",
"75788707441007696667342305501127462683",
"228731420732408311098966528848810606353",
"79660006926088432338331737464374825664",
"51783893781803712167642011021616129341",
"12425954459326280068953977363924606156",
"295575813053997803070102321482201118798",
"128768150599797746354594055285728971972",
"202895910181252985085978843506779542869",
"94688775310085460621423721127064828765",
"76885051292509422678105334342160904027",
"121257241749438700698077431559322055472",
"177934244431725784112617936214070352620",
"234512392941696657339512928388055102931",
"180958356274850729619562124716706121865",
"292248870307863227105999581352140379451",
"76140085129003645924997114528706725526",
"277755094413772876777178775332915358706",
"218363888797155162671063441407102707822",
"185808402347370816324431371860819731607",
"23102789197005632755152597068235915127",
"283442334286994921110982548401944418831",
"321271158524620391662705207053718237306",
"25231049693843710321883529015884885261"
],
"threshold": 0.9
},
"id": "CVE-2026-115482-44f4d11a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "src/liblsquic/lsquic_stream.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "184750299075963181646567227758308396621",
"length": 1657
},
"id": "CVE-2026-115482-4d6dc31b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "tests/test_h3_framing.c",
"function": "main"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"102992201232266918188658659868597776233",
"153153339619832618633952000389234210406",
"302068726811502483650397960113815415293"
],
"threshold": 0.9
},
"id": "CVE-2026-115482-504c5c26",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "bin/prog.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "36310104028018692759683522120908321826",
"length": 1254
},
"id": "CVE-2026-115482-50a09fdc",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "src/liblsquic/lsquic_stream.c",
"function": "read_data_frames"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "303673221503462669114995234331587762297",
"length": 509
},
"id": "CVE-2026-115482-594a740d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "tests/test_send_headers.c",
"function": "main"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"20745014627922643854281060853476923756",
"48793948585141361453233054256456798293",
"250945694145869166605228296166443150535",
"321968652717755080945582116244620967359"
],
"threshold": 0.9
},
"id": "CVE-2026-115482-5dc08ed1",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "bin/test_common.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"122892132563801598636102676122694789669",
"71376449618154957213155173976374194690",
"42271753965433722552312459578146149106",
"298654463246295127466915841572767281334"
],
"threshold": 0.9
},
"id": "CVE-2026-115482-5e0427a1",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "src/liblsquic/lsquic_enc_sess_ietf.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "114443300921545606383532105928579314762",
"length": 633
},
"id": "CVE-2026-115482-6078cf31",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "tests/test_engine_ctor.c",
"function": "main"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "207154565576100803945602292502542930526",
"length": 1014
},
"id": "CVE-2026-115482-6ab1bc7c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "src/liblsquic/lsquic_stream.c",
"function": "hq_filter_df"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "6619088599930558143479667018576330420",
"length": 8577
},
"id": "CVE-2026-115482-72ce1d2c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "bin/test_common.c",
"function": "set_engine_option"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"95429675602518423370408680826242874080",
"170239931920243764126766460265460395014",
"86355896896773869717523697775767372558",
"156240720558143236574425593891262439706",
"287470049894818935477951895275751329468",
"55631505337108619650907898648189058663",
"253814171704962117017333943148636454620",
"37892116348400513232599687964849091666",
"53071559189781184102128496904957932101",
"259385845066501431874259660950849994169"
],
"threshold": 0.9
},
"id": "CVE-2026-115482-798d7b4b",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "include/lsquic.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"263474441652156247550298623789647791083",
"172625211275368102775505328366807629541",
"67679323218821983812497828788682178602",
"60593157422412082286499292547334186315",
"86789850473513229220069767772336459291",
"304966004909051452867910757075944151187",
"299633944714155833502858179102712585315",
"187294179727441199811855555719838773744",
"268578438943719660420121000580999992362",
"242549154251929515735182119449263296984",
"190707545474944139424477105252882032514",
"63055181025493007307049133908496776885"
],
"threshold": 0.9
},
"id": "CVE-2026-115482-7b1e9e4f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "tests/test_engine_ctor.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"66584692692773187604543835371316447342",
"127478497922773001477747362973793359941",
"74022712035756562206042810174648702356",
"304107073919215209947945407473570637928",
"85642842639300730131560745535762768054",
"305984369259137158225475609148836908848",
"219240318535546349529968254915713953887",
"16861374628279998422303654885898482865",
"90032811621160402056558787962075281035",
"83865882047593652689722633477806397720",
"187125309741293735272152637159431254845",
"48696798019733139358015485065417756677"
],
"threshold": 0.9
},
"id": "CVE-2026-115482-7fad2d63",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "src/liblsquic/lsquic_engine.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "187690506646000996159842260392009685796",
"length": 1458
},
"id": "CVE-2026-115482-9123ed6a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "src/liblsquic/lsquic_enc_sess_ietf.c",
"function": "iquic_esfi_handshake"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"158022634516900350242239206010362938392",
"159715276951232188285676286653074891908",
"31050375278716128319459488228579688034",
"220108038684856675782759494854476411547",
"81827380199406511351889436191450379446",
"24655778047628900253063069051196639623",
"119776615461340145917233167144075349252",
"326299445812137864197205755327458623184",
"105689765851964172079849580109596654478",
"149636339444616440869909710486904998525",
"280873961142513360977205813422139753191",
"24100404099606091630282291392670661294",
"314887244233773395276418745057238489136",
"231209260245374175592312711433029497662",
"210069501230029166689730514726678928864"
],
"threshold": 0.9
},
"id": "CVE-2026-115482-93108260",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "tests/test_send_headers.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"156413025610203152490007829149745950730",
"13412410482248204548978546316039238969",
"67474491075247748767591634737191504463",
"140034575773208332703351258079622315261",
"9760440345244294884101516057354967355",
"15963513903446354034260232991904586783",
"121138361985488363938248263290036778457",
"186175980340702796470739959806980412680"
],
"threshold": 0.9
},
"id": "CVE-2026-115482-964a7a3e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "src/liblsquic/lsquic_stream.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "186227420166972272613371806119902001035",
"length": 256
},
"id": "CVE-2026-115482-96eb7aa6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "src/liblsquic/lsquic_stream.c",
"function": "stream_readable_http_ietf"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "120265070123596986437864178481497337073",
"length": 4482
},
"id": "CVE-2026-115482-9ad9dc99",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "bin/prog.c",
"function": "prog_print_common_options"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "289340328532246777622462700204380537802",
"length": 836
},
"id": "CVE-2026-115482-a1009eb4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "src/liblsquic/lsquic_stream.c",
"function": "stream_new_common"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "185698474531273231587773204073669368519",
"length": 4747
},
"id": "CVE-2026-115482-b239a5db",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "src/liblsquic/lsquic_engine.c",
"function": "lsquic_engine_init_settings"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"251609992000644487824433927921125541028",
"23003228494274089918027920718387414409",
"121093890640713346460082443655193557447",
"108820773577746196286840063992305056664",
"262789713050307210846615994887354160283",
"113696176443708130178387461772067222858",
"53610566378901701113764510851712866441",
"253129318769665211808729432090441876661",
"288867038250876512064912369891161387732",
"75529764567302597065956621156369919226",
"257076558448023571812009323183202573043",
"95697733149129997490890107953274502306",
"316061472725072945554299804875031181349",
"60435241596889833399818384380545456268",
"51579959526034368085963762784821709837",
"43015905801612101166960642567175566118",
"275170661837588849791045902355974535337",
"46891868437124197761734711923479292608",
"132246814147073515082164849624115803806",
"201346493906792516293227453011004888102",
"100675784989986224996563573854117744101",
"143795175143989086057426209723839249436",
"226264738984405203909509509355353548754",
"218836241167310632655244618904828438556",
"42471026324822530888905154975200451575",
"199681524976961240464015129035953751118",
"156510628317965636580055947885036041160",
"282066539594872882787401661430087588988",
"150152553268033268255379173399633702709",
"241500651470561938761163632299977119756",
"248822890074795997145112965398235153627",
"186620532184638453440760307147168770688",
"248326968917537353243258180365837352098",
"13145001268658167478593130255177934113",
"221028304673957361473301808283401461958",
"269005575529032561632933678667021922423",
"238894629693910061210905566483335764469",
"190901210345937890254001257107594129585",
"129801736978241289170004562179578834961"
],
"threshold": 0.9
},
"id": "CVE-2026-115482-b9c1a35e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "src/liblsquic/lsquic_full_conn_ietf.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "156509666219538728166473860948962944519",
"length": 2159
},
"id": "CVE-2026-115482-dda34308",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "tests/test_h3_framing.c",
"function": "init_test_objs"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"276967630770874327945272217914032546053",
"282753853503080811492860510623386196440",
"151369268795619031480147795911038977312",
"171482153502137212612002250054584106795",
"94536127503455185015667267874192948720",
"89940591132646591975574878990974224309",
"118063157688400186272365236459106278318",
"251376944545677298118146342808884031339",
"179916509196055173186842219742933121679",
"207131191566156342343819803401789049316",
"80483239583766180540615754732558748565",
"188399215801384255567944281715471668728",
"298258533457825553933187363807240625743",
"335692022157269890610656494771791969208",
"144954513445758092874830986046854032044",
"306935214849662425077349770167503983457",
"214564007219125855047397293500075217970",
"91726224034716111325497705355543403348",
"64223800207563961187983366992697988983",
"321918959387334901774073695487968876217",
"84625881526134571332375132380582872528",
"102252125725572620426397226904353692569",
"91144238308714839578535347890952339375"
],
"threshold": 0.9
},
"id": "CVE-2026-115482-de5dd118",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "tests/test_h3_framing.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "106023548955503815660796080065037767146",
"length": 788
},
"id": "CVE-2026-115482-e0e3d055",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "src/liblsquic/lsquic_stream.c",
"function": "stream_uh_in_gquic"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "33575606432306734836061402413073116236",
"length": 1914
},
"id": "CVE-2026-115482-e16b4ef5",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "src/liblsquic/lsquic_full_conn_ietf.c",
"function": "process_stop_sending_frame"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "285592548744951100271149229481768753372",
"length": 2076
},
"id": "CVE-2026-115482-ef5b5043",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "src/liblsquic/lsquic_full_conn_ietf.c",
"function": "immediate_close"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "54082525955774420294349230400353249698",
"length": 3117
},
"id": "CVE-2026-115482-ffd3e8c4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/litespeedtech/lsquic/commit/8f3a7cbccdf6b908844cff49bd9f9fe57a466e36",
"target": {
"file": "src/liblsquic/lsquic_engine.c",
"function": "lsquic_engine_check_settings"
}
}
]
vanir_signatures_modified
"2026-10-28T10:46:14Z"