apernet github.com/apernet/hysteria/core/v2 vulnerabilities

Latest apernet github.com/apernet/hysteria/core/v2 CVEs

Newest publication first

1. GHSA-vgrc-hq28-p3xp Hysteria has an authenticated UDP ACL bypass that enables localhost and private-network UDP SSRF

   Published 2026-06-26

   High·CVSS 7.4

   Summary Hysteria's UDP relay treats the destination address as packet-scoped, but ACL and outbound policy are applied only once when a new UDP session is created. After an authenticated client opens a UDP session using an allowed first destination, later packets in the same Sessi...

2. GHSA-9fw6-xgg2-mq9q Hysteria: A specially constructed quic package can crash the server OOM when the sniff is enabled

   Published 2026-05-05

   High·CVSS 8.8

   Summary A specially constructed quic package can crash the server OOM when the sniff is enabled. Details When the server has sniff enabled, a valid connection can request the server to forward UDP traffic and construct a huge crypto length. The server will allocate memory accordi...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.