Vendors / pion Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now pion records in CISA KEV No pion vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 48
handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to inject arbitrary unencrypted data after handshake completion.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03012 · Published 2020-04-19 · Fixed in 1.5.2 CWE-287
Priority MEDIUM 42
Pion DTLS is a Go implementation of Datagram Transport Layer Security.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01744 · Published 2022-05-20 · Fixed in 2.1.4 CWE-835
Priority LOW 34
Pion DTLS is a Go implementation of Datagram Transport Layer Security.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00825 · Published 2022-05-21 · Fixed in 2.1.5 CWE-295
Priority LOW 34
Pion DTLS is a Go implementation of Datagram Transport Layer Security.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02149 · Published 2022-05-20 · Fixed in 2.1.4 CWE-120
Priority LOW 28
Pion DTLS is a Go implementation of Datagram Transport Layer Security.
CVSS 3.1 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00687 · Published 2026-02-11 · Partial fix · 3.0.11, 3.1.1 CWE-200
Open these records in search → All records by CVSS severity
1 3 4 0 0
