Microsoft.Native.Quic.MsQuic.OpenSSL

CriticalNuGetCVE-2026-105794October 6, 2026

What to do

Update Microsoft.Native.Quic.MsQuic.OpenSSL to 2.4.20 or later.

dotnet add package Microsoft.Native.Quic.MsQuic.OpenSSL --version 2.4.20

A security flaw affects the NuGet package Microsoft.Native.Quic.MsQuic.OpenSSL. Affected versions: < 2.4.20. Fixed from version 2.4.20.

What the flaw allows: See the advisory for the impact details.

Package: Microsoft.Native.Quic.MsQuic.OpenSSL
Ecosystem: NuGet (.NET)
Class: Other
Affected versions: < 2.4.20
Published on: October 6, 2026

Sources

GitHub Security Advisory — GHSA-w5f4-fx9m-m4q7GitHub Security Advisories
NVD — CVE-2026-105794NVD

Entry built automatically from the cited security advisory, with no model rewriting. Acknowledged by the organisation or vendor, notified to an authority, or established by two independent sources.