h3 vulnerabilities

Recent CVEs affecting h3 products. 5 tracked.

h3 has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-03-26. Highest priority: CVE-2026-33128 (score 48/100).

CVE-2026-33732 MEDIUM 4.8 UPGRADE srvx is a universal server based on web standards
CVE-2026-33490 LOW 3.7 DOWNGRADE H3 is a minimal H(TTP) framework
CVE-2026-33131 HIGH 7.4 DOWNGRADE H3 is a minimal H(TTP) framework
CVE-2026-33129 MEDIUM 5.9 DOWNGRADE H3 is a minimal H(TTP) framework
CVE-2026-33128 HIGH 7.5 UPGRADE H3 is a minimal H(TTP) framework

FAQ

How do I fix h3 vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is h3 being exploited right now?

None of the tracked h3 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which h3 CVE should I patch first?

CVE-2026-33128 currently ranks highest (48/100): H3 is a minimal H(TTP) framework.

Products

RSS feed for h3 · ← Back to latest CVEs