spdystream vulnerabilities

CVEs whose affected-version data names the spdystream package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-35469Medium· 6.5⚖ disputed

5mo ago

spdystream is a Go library for multiplexing streams over SPDY connections

spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are…

▾ Sunlitmoby · spdystreamEPSS 0.79%via NVD