Vendors / pion Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now pion records in CISA KEV No pion vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 48
handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to inject arbitrary unencrypted data after handshake completion.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03012 · Published 2020-04-19 · Fixed in 1.5.2 CWE-287
Priority MEDIUM 42
Pion DTLS is a Go implementation of Datagram Transport Layer Security.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01744 · Published 2022-05-20 · Fixed in 2.1.4 CWE-835
Priority LOW 39
Pion Interceptor is a framework for building RTP/RTCP communication software.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00514 · Published 2025-06-09 · Fixed in 0.1.39 CWE-770
Priority LOW 34
Pion DTLS is a Go implementation of Datagram Transport Layer Security.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00825 · Published 2022-05-21 · Fixed in 2.1.5 CWE-295
Priority LOW 34
Pion DTLS is a Go implementation of Datagram Transport Layer Security.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02149 · Published 2022-05-20 · Fixed in 2.1.4 CWE-120
Priority LOW 31
pion/stun is a Go implementation of STUN.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00644 · Published 2026-07-31 · Fixed in 3.1.3, 3.1.5 CWE-20
Priority LOW 29
Pion DTLS is a Go implementation of Datagram Transport Layer Security.
CVSS 4.0 MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00542 · Published 2026-07-01 · Fixed in 3.1.4 CWE-125
Priority LOW 28
Pion DTLS is a Go implementation of Datagram Transport Layer Security.
CVSS 3.1 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00687 · Published 2026-02-11 · Partial fix · 3.0.11, 3.1.1 CWE-200
Open these records in search → All records by CVSS severity
1 3 4 0 0
THREATIST.IORead the docs