From b6bcb7d366aa8677ca515022cb03656e5429f2fe Mon Sep 17 00:00:00 2001 From: Jared Wolff Date: Sun, 15 Mar 2026 14:42:34 -0400 Subject: [PATCH] Fix RUSTSEC-2026-0037: update quinn-proto to 0.11.14 Patch denial-of-service vulnerability where invalid QUIC transport parameters could cause a panic in quinn-proto. Co-Authored-By: Claude Opus 4.6 --- Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 76996ad8..4f25576e 100755 --- a/Cargo.lock +++ b/Cargo.lock @@ -3051,9 +3051,9 @@ dependencies = [ [[package]] name = "quinn-proto" -version = "0.11.13" +version = "0.11.14" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f1906b49b0c3bc04b5fe5d86a77925ae6524a19b816ae38ce1e426255f1d8a31" +checksum = "434b42fec591c96ef50e21e886936e66d3cc3f737104fdb9b737c40ffb94c098" dependencies = [ "bytes", "getrandom 0.3.4",