TI-2026-21028 CVE-2026-26014 · GHSA-9f3f-wv7r-qc8r
Pion DTLS uses random nonce generation with AES GCM ciphers risks leaking the authentication key
Priority LOW 28
Pion DTLS is a Go implementation of Datagram Transport Layer Security.
Vulnerabilities
5 records
TI-2022-11765 CVE-2022-29222 · GHSA-w45j-f832-hxvh
Improper Certificate Validation in Pion DTLS
Priority LOW 34
Pion DTLS is a Go implementation of Datagram Transport Layer Security.
TI-2022-11732 CVE-2022-29189 · GHSA-cx94-mrg9-rq4j
Buffer for inbound DTLS fragments has no limit
Priority LOW 34
Pion DTLS is a Go implementation of Datagram Transport Layer Security.
TI-2022-11733 CVE-2022-29190 · GHSA-cm8f-h6j3-p25c
Header reconstruction method can be thrown into an infinite loop in Pion DTLS
Priority MEDIUM 42
Pion DTLS is a Go implementation of Datagram Transport Layer Security.
TI-2019-15006 CVE-2019-20786 · GHSA-7gfg-6934-mqq2
handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application…
Priority MEDIUM 48
handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to inject arbitrary unencrypted data after handshake completion.