Threats affecting pkg:cargo/quinn-proto

A vulnerability in quinn-proto allows a client to retain an excessively long Retry token from a Retry packet without length limits, causing memory exhaustion or panic in the QUIC client. This occurs because the token is included in every Initial packet header, leading to an invalid packet size calculation. The issue affects all quinn-proto clients making outgoing connections. The flaw is fixed in version 0.11.19 by closing connections with PROTOCOL_VIOLATION when tokens leave insufficient room for frames.

A vulnerability in quinn-proto versions 0.11.0 through 0.11.18 allows a peer to open an excessive number of bidirectional streams by sending a MAX_STREAM_DATA frame with a large stream index. This causes the endpoint to implicitly open all streams up to that index, potentially exhausting memory or causing denial of service. The issue does not affect unidirectional streams. The flaw is fixed in version 0.11.19.