#FoxIO

Unpatched Flaw in Alibaba's XQUIC Lets Anyone Crash HTTP/3 Servers With 260 Bytes

FoxIO researcher Sébastien Féry disclosed the bug on 8 July. There's no fix, no login required, and no malformed packets involved.