webtransport

Jul 27, 2026

Changes in this version

+ const WTFlowControlErrorCode

+ type ClientConn struct

+ func (c *ClientConn) Dial(ctx context.Context, urlStr string, reqHdr http.Header) (*http.Response, *Session, error)

+ func (c *ClientConn) RoundTrip(req *http.Request) (*http.Response, error)

+ type Config struct

+ MaxIncomingData int64

+ MaxIncomingStreams int64

+ MaxIncomingUniStreams int64

type Server

+ Config *Config

+ type StreamLimitReachedError struct

+ func (e StreamLimitReachedError) Error() string

+ type Transport struct

+ ApplicationProtocols []string

+ Config *Config

+ DialAddr func(ctx context.Context, addr string, tlsCfg *tls.Config, cfg *quic.Config) (*quic.Conn, error)

+ QUICConfig *quic.Config

+ StreamReorderingTimeout time.Duration

+ TLSClientConfig *tls.Config

+ func (d *Transport) Close() error

+ func (d *Transport) Dial(ctx context.Context, urlStr string, reqHdr http.Header) (*http.Response, *Session, error)

+ func (d *Transport) NewClientConn(qconn *quic.Conn) (*ClientConn, error)

Jun 15, 2026 GO-2026-6099

  GO-2026-6099: webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules in github.com/quic-go/webtransport-go

Changes in this version

+ const WTALPNErrorCode

+ const WTRequirementsNotMetErrorCode

+ type RequirementsNotMetError struct

+ Message string

+ func (e *RequirementsNotMetError) Error() string

Jan 12, 2026 GO-2026-6099

  GO-2026-6099: webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules in github.com/quic-go/webtransport-go

Changes in this version

+ const WTBufferedStreamRejectedErrorCode

+ const WTSessionGoneErrorCode

+ func ConfigureHTTP3Server(s *http3.Server)

type Dialer

+ ApplicationProtocols []string

type SendStream

+ func (s *SendStream) Context() context.Context

type Server

+ ApplicationProtocols []string

type Session

+ func (s *Session) SessionState() SessionState

type SessionError

+ func (e *SessionError) Is(target error) bool

+ type SessionState struct

+ ApplicationProtocol string

+ ConnectionState quic.ConnectionState

type Stream

+ func (s *Stream) Context() context.Context

Jun 24, 2025 GO-2026-4483 +3 more

  GO-2026-4483: webtransport-go: Memory Exhaustion Attack due to Missing Cleanup of Streams Map in github.com/quic-go/webtransport-go

  GO-2026-4485: webtransport-go: Memory Exhaustion Attack due to Missing Length Check in WT_CLOSE_SESSION Capsule in github.com/quic-go/webtransport-go

  GO-2026-4488: webtransport-go: CloseWithError can block indefinitely in github.com/quic-go/webtransport-go

  GO-2026-6099: webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules in github.com/quic-go/webtransport-go

Changes in this version

type ReceiveStream

+ func (s *ReceiveStream) Read(b []byte) (int, error)

type SendStream

+ func (s *SendStream) Close() error

+ func (s *SendStream) Write(b []byte) (int, error)

type Stream

+ func (s *Stream) CancelRead(e StreamErrorCode)

+ func (s *Stream) CancelWrite(e StreamErrorCode)

+ func (s *Stream) Close() error

+ func (s *Stream) Read(b []byte) (int, error)

+ func (s *Stream) SetReadDeadline(t time.Time) error

+ func (s *Stream) SetWriteDeadline(t time.Time) error

+ func (s *Stream) StreamID() quic.StreamID

+ func (s *Stream) Write(b []byte) (int, error)

Apr 27, 2024 GO-2026-4483 +3 more

  GO-2026-4483: webtransport-go: Memory Exhaustion Attack due to Missing Cleanup of Streams Map in github.com/quic-go/webtransport-go

  GO-2026-4485: webtransport-go: Memory Exhaustion Attack due to Missing Length Check in WT_CLOSE_SESSION Capsule in github.com/quic-go/webtransport-go

  GO-2026-4488: webtransport-go: CloseWithError can block indefinitely in github.com/quic-go/webtransport-go

  GO-2026-6099: webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules in github.com/quic-go/webtransport-go

Changes in this version

type Dialer

+ DialAddr func(ctx context.Context, addr string, tlsCfg *tls.Config, cfg *quic.Config) (quic.EarlyConnection, error)

+ QUICConfig *quic.Config

+ TLSClientConfig *tls.Config

type Server

+ ReorderingTimeout time.Duration

type Session

+ func (s *Session) ReceiveDatagram(ctx context.Context) ([]byte, error)

+ func (s *Session) SendDatagram(b []byte) error

+ type SessionError struct

+ ErrorCode SessionErrorCode

+ Message string

+ Remote bool

+ func (e *SessionError) Error() string

type StreamError

+ Remote bool

Mar 23, 2024 GO-2026-4483 +3 more

  GO-2026-4483: webtransport-go: Memory Exhaustion Attack due to Missing Cleanup of Streams Map in github.com/quic-go/webtransport-go

  GO-2026-4485: webtransport-go: Memory Exhaustion Attack due to Missing Length Check in WT_CLOSE_SESSION Capsule in github.com/quic-go/webtransport-go

  GO-2026-4488: webtransport-go: CloseWithError can block indefinitely in github.com/quic-go/webtransport-go

  GO-2026-6099: webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules in github.com/quic-go/webtransport-go

Sep 24, 2023 GO-2026-4483 +3 more

  GO-2026-4483: webtransport-go: Memory Exhaustion Attack due to Missing Cleanup of Streams Map in github.com/quic-go/webtransport-go

  GO-2026-4485: webtransport-go: Memory Exhaustion Attack due to Missing Length Check in WT_CLOSE_SESSION Capsule in github.com/quic-go/webtransport-go

  GO-2026-4488: webtransport-go: CloseWithError can block indefinitely in github.com/quic-go/webtransport-go

  GO-2026-6099: webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules in github.com/quic-go/webtransport-go

May 18, 2023 GO-2026-4483 +3 more

  GO-2026-4483: webtransport-go: Memory Exhaustion Attack due to Missing Cleanup of Streams Map in github.com/quic-go/webtransport-go

  GO-2026-4485: webtransport-go: Memory Exhaustion Attack due to Missing Length Check in WT_CLOSE_SESSION Capsule in github.com/quic-go/webtransport-go

  GO-2026-4488: webtransport-go: CloseWithError can block indefinitely in github.com/quic-go/webtransport-go

  GO-2026-6099: webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules in github.com/quic-go/webtransport-go

Feb 26, 2023 GO-2026-4483 +3 more

  GO-2026-4483: webtransport-go: Memory Exhaustion Attack due to Missing Cleanup of Streams Map in github.com/quic-go/webtransport-go

  GO-2026-4485: webtransport-go: Memory Exhaustion Attack due to Missing Length Check in WT_CLOSE_SESSION Capsule in github.com/quic-go/webtransport-go

  GO-2026-4488: webtransport-go: CloseWithError can block indefinitely in github.com/quic-go/webtransport-go

  GO-2026-6099: webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules in github.com/quic-go/webtransport-go

Feb 8, 2023 GO-2026-4483 +3 more

  GO-2026-4483: webtransport-go: Memory Exhaustion Attack due to Missing Cleanup of Streams Map in github.com/quic-go/webtransport-go

  GO-2026-4485: webtransport-go: Memory Exhaustion Attack due to Missing Length Check in WT_CLOSE_SESSION Capsule in github.com/quic-go/webtransport-go

  GO-2026-4488: webtransport-go: CloseWithError can block indefinitely in github.com/quic-go/webtransport-go

  GO-2026-6099: webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules in github.com/quic-go/webtransport-go

Feb 2, 2023 GO-2026-4483 +3 more

  GO-2026-4483: webtransport-go: Memory Exhaustion Attack due to Missing Cleanup of Streams Map in github.com/quic-go/webtransport-go

  GO-2026-4485: webtransport-go: Memory Exhaustion Attack due to Missing Length Check in WT_CLOSE_SESSION Capsule in github.com/quic-go/webtransport-go

  GO-2026-4488: webtransport-go: CloseWithError can block indefinitely in github.com/quic-go/webtransport-go

  GO-2026-6099: webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules in github.com/quic-go/webtransport-go

Changes in this version

+ const WebTransportBufferedStreamRejectedErrorCode

+ type ConnectionError struct

+ ErrorCode SessionErrorCode

+ Message string

+ Remote bool

+ func (e *ConnectionError) Error() string

+ type Dialer struct

+ StreamReorderingTimeout time.Duration

+ func (d *Dialer) Close() error

+ func (d *Dialer) Dial(ctx context.Context, urlStr string, reqHdr http.Header) (*http.Response, *Session, error)

+ type ReceiveStream interface

+ CancelRead func(StreamErrorCode)

+ SetReadDeadline func(time.Time) error

+ StreamID func() quic.StreamID

+ type SendStream interface

+ CancelWrite func(StreamErrorCode)

+ SetWriteDeadline func(time.Time) error

+ StreamID func() quic.StreamID

+ type Server struct

+ CheckOrigin func(r *http.Request) bool

+ H3 http3.Server

+ StreamReorderingTimeout time.Duration

+ func (s *Server) Close() error

+ func (s *Server) ListenAndServe() error

+ func (s *Server) ListenAndServeTLS(certFile, keyFile string) error

+ func (s *Server) Serve(conn net.PacketConn) error

+ func (s *Server) ServeQUICConn(conn quic.Connection) error

+ func (s *Server) Upgrade(w http.ResponseWriter, r *http.Request) (*Session, error)

+ type Session struct

+ func (c *Session) ConnectionState() quic.ConnectionState

+ func (s *Session) AcceptStream(ctx context.Context) (Stream, error)

+ func (s *Session) AcceptUniStream(ctx context.Context) (ReceiveStream, error)

+ func (s *Session) CloseWithError(code SessionErrorCode, msg string) error

+ func (s *Session) Context() context.Context

+ func (s *Session) LocalAddr() net.Addr

+ func (s *Session) OpenStream() (Stream, error)

+ func (s *Session) OpenStreamSync(ctx context.Context) (str Stream, err error)

+ func (s *Session) OpenUniStream() (SendStream, error)

+ func (s *Session) OpenUniStreamSync(ctx context.Context) (str SendStream, err error)

+ func (s *Session) RemoteAddr() net.Addr

+ type SessionErrorCode uint32

+ type Stream interface

+ SetDeadline func(time.Time) error

+ type StreamError struct

+ ErrorCode StreamErrorCode

+ func (e *StreamError) Error() string

+ func (e *StreamError) Is(target error) bool

+ type StreamErrorCode uint8