Microsoft.Native.Quic.MsQuic.OpenSSL 2.4.17-rc2

Prefix Reserved

This package has at least one vulnerability with critical severity. It may lead to specific problems in your project. Try updating the package version.

Details

Advisory: https://github.com/advisories/GHSA-gvvw-8j96-8g5r

Severity: critical

This package has been deprecated as it has critical bugs.

Additional Details

Please see https://github.com/microsoft/msquic/releases/tag/v2.5.7 and https://github.com/microsoft/msquic/releases/tag/v2.4.18 for more details.

This is a prerelease version of Microsoft.Native.Quic.MsQuic.OpenSSL.

This package has a SemVer 2.0.0 package version: 2.4.17-rc2+135213867.

There is a newer version of this package available.
See the version list below for details.

dotnet add package Microsoft.Native.Quic.MsQuic.OpenSSL --version 2.4.17-rc2

NuGet\Install-Package Microsoft.Native.Quic.MsQuic.OpenSSL -Version 2.4.17-rc2

This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package.

<PackageReference Include="Microsoft.Native.Quic.MsQuic.OpenSSL" Version="2.4.17-rc2" />

For projects that support PackageReference, copy this XML node into the project file to reference the package.

<PackageVersion Include="Microsoft.Native.Quic.MsQuic.OpenSSL" Version="2.4.17-rc2" />
                    

                            Directory.Packages.props

<PackageReference Include="Microsoft.Native.Quic.MsQuic.OpenSSL" />
                    

                            Project file

For projects that support Central Package Management (CPM), copy this XML node into the solution Directory.Packages.props file to version the package.

paket add Microsoft.Native.Quic.MsQuic.OpenSSL --version 2.4.17-rc2

The NuGet Team does not provide support for this client. Please contact its maintainers for support.

#r "nuget: Microsoft.Native.Quic.MsQuic.OpenSSL, 2.4.17-rc2"

#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package.

#:package Microsoft.Native.Quic.MsQuic.OpenSSL@2.4.17-rc2

#:package directive can be used in C# file-based apps starting in .NET 10 preview 4. Copy this into a .cs file before any lines of code to reference the package.

#addin nuget:?package=Microsoft.Native.Quic.MsQuic.OpenSSL&version=2.4.17-rc2&prerelease
                    

                            Install as a Cake Addin

#tool nuget:?package=Microsoft.Native.Quic.MsQuic.OpenSSL&version=2.4.17-rc2&prerelease
                    

                            Install as a Cake Tool

The NuGet Team does not provide support for this client. Please contact its maintainers for support.

MsQuic is a Microsoft implementation of the IETF QUIC protocol. It is cross-platform, written in C and designed to be a general purpose QUIC library. MsQuic also has C++ API wrapper classes and exposes interop layers for both Rust and C#.

Protocol Features

QUIC has many benefits when compared to existing "TLS over TCP" scenarios:

All packets are encrypted and handshake is authenticated with TLS 1.3.
Parallel streams of (reliable and unreliable) application data.
Exchange application data in the first round trip (0-RTT).
Improved congestion control and loss recovery.
Survives a change in the clients IP address or port.
Stateless load balancing.
Easily extendable for new features and extensions.

Library Features

MsQuic has several features that differentiates it from other QUIC implementations:

Optimized for client and server.
Optimized for maximal throughput and minimal latency.
Asynchronous IO.
Receive side scaling (RSS) support.
UDP send and receive coalescing support.

Documentation

For platform support details, see the Platforms docs.
For release details, see the Release docs.
For performance data, see the Performance dashboard.
For building the library, see the Build docs.
For testing the library, see the Testing docs.
For using the API, see the API docs or the Sample.
For running a sample server and client app, see the Quick Start Guide.
For deploying QUIC, see the Deployment docs.
For diagnosing issues, see the Diagnostics docs and the Trouble Shooting Guide.
For other frequently asked questions, see the FAQs.

Contributing

For information on contributing, please see our contribution guidelines. Feel free to take a look at our Good First Issues list if you're looking for somewhere to start. If you'd just like to talk, come chat with us on Discord.

Product	Compatible and additional computed target framework versions.
native	native is compatible.

Compatible target framework(s)

Included target framework(s) (in package)

Learn more about Target Frameworks and .NET Standard.

This package has no dependencies.

NuGet packages

This package is not used by any NuGet packages.

GitHub repositories (5)

Showing the top 5 popular GitHub repositories that depend on Microsoft.Native.Quic.MsQuic.OpenSSL:

Repository	Stars
dotnet/runtime .NET is a cross-platform runtime for cloud, mobile, desktop, and IoT apps.	17.9K
dotnet/dotnet Home of .NET's Virtual Monolithic Repository which includes all the code needed to build the .NET SDK.	1.1K
VSadov/Satori Experimenting with dotnet runtime.	363
xihan123/DnsSpeedTestApp DNS 测速	195
NethermindEth/dotnet-libp2p A libp2p implementation for .NET in C#.	115

Version	Downloads	Last Updated
2.5.7	824	4/15/2026
2.5.7-rc2	58	4/13/2026
2.5.7-rc	72	1/22/2026
2.5.6	609	12/12/2025
2.5.6-rc	74	12/8/2025
2.5.5	1,038	10/24/2025
2.4.18	35	4/15/2026
2.4.18-rc	58	4/13/2026
2.4.17	87	12/12/2025
2.4.17-rc2	76	12/8/2025
2.4.17-rc	77	11/25/2025
2.4.16	486	10/24/2025