Issues

• Protobuf: varint reader accepts values overflowing 64 bits

  bug
  c4punks/CWIST#543 · Filter by author gg582 opened on Nov 3, 2026

• HTTP/3 client: recv_datagram truncates and discards the unread suffix

  bug
  c4punks/CWIST#542 · Filter by author gg582 opened on Nov 3, 2026

• HTTP client: status-line callback parses a non-NUL libcurl buffer with strtol

  bug
  c4punks/CWIST#541 · Filter by author gg582 opened on Nov 3, 2026

• WebRTC STUN: declared message length drives find_mi past the datagram

  bug
  c4punks/CWIST#540 · Filter by author gg582 opened on Nov 3, 2026

• HTTP/2: padding validation accepts malformed HEADERS and rejects valid empty DATA

  bug
  c4punks/CWIST#539 · Filter by author gg582 opened on Nov 3, 2026

• WebRTC SDP: length-delimited input is read past its end by strcspn

  bug
  c4punks/CWIST#538 · Filter by author gg582 opened on Nov 3, 2026

• WebSocket: reserved opcodes are delivered instead of rejected on both receive paths

  bug
  c4punks/CWIST#535 · Filter by author gg582 opened on Nov 3, 2026

• HTTP/3: oversized outgoing datagrams are silently truncated on client and server

  bug
  c4punks/CWIST#534 · Filter by author gg582 opened on Nov 3, 2026

• HTTP/3 client: enable_datagrams cannot change the already-created engine

  bug
  c4punks/CWIST#533 · Filter by author gg582 opened on Nov 3, 2026

• HTTP/3 client: set_server keeps using the previous connection and resolved address

  bug
  c4punks/CWIST#532 · Filter by author gg582 opened on Nov 3, 2026

• gRPC health: partial registration failure leaves a dangling registry in Check

  bug
  c4punks/CWIST#531 · Filter by author gg582 opened on Nov 3, 2026

• gRPC: replacing a route between unary and streaming leaves dispatch stale

  bug
  c4punks/CWIST#530 · Filter by author gg582 opened on Nov 3, 2026

• gRPC client: padded and prioritized HEADERS are passed to HPACK unchanged

  bug
  c4punks/CWIST#529 · Filter by author gg582 opened on Nov 3, 2026

• Reactor: startup listener registration failure is ignored, server runs without accepting

  bug
  c4punks/CWIST#527 · Filter by author gg582 opened on Nov 3, 2026

• HTTPS pool: profile the task-queue lock and compare against sharded / lock-free variants

  c4punks/CWIST#353 · Filter by author gg582 opened on Oct 11, 2026
  1

• [ROADMAP] Language binding

  enhancementgood first issue
  c4punks/CWIST#36 · Filter by author gg582 opened on Sep 12, 2026
  10

• Try the full WebTransport support

  enhancement
  c4punks/CWIST#17 · Filter by author dtikhonov opened on May 30, 2026 · v4.2
  6