Login Request a demo
LS
Product
lsquic
by litespeedtech · last CVE Oct 22, 2026
4
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 2High 2Medium 0Low 0
Severity
All severities4Critical2High2Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add lsquic to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-25678
9.8
0%
Feb 9
In LiteSpeed QUIC (LSQUIC) Library before 4.0.4, DCID validation is mishandled
Affected: before 4.0.4
CVE-2022-30592
9.8
3%
May 11
liblsquic/lsquic_qenc_hdl.c in LiteSpeed QUIC (aka LSQUIC) before 3.1.0 mishandles MAX_TABLE_CAPACITY
Affected: before 3.1.0
CVE-2026-115482
New
7.5
0%
Oct 22
In lsquic before 4.9.0, the HTTP/3 implementation can use an excessive amount of memory because the number of buffered header sets is not limited, as demonstrated by a QPACK…
Affected: before 4.9.0
CVE-2025-54939
7.5
1%
Aug 1
LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak
Affected: before 4.3.1
Showing 4