TI-2026-39681 CVE-2026-54909 · GHSA-34rh-wp3j-6cxc
Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute
Priority LOW 31
pion/stun is a Go implementation of STUN.
Vulnerabilities
8 records
TI-2026-39680 CVE-2026-54908 · GHSA-wg4g-wm44-ch5j
Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message
Priority LOW 29
Pion DTLS is a Go implementation of Datagram Transport Layer Security.
TI-2026-21028 CVE-2026-26014 · GHSA-9f3f-wv7r-qc8r
Pion DTLS uses random nonce generation with AES GCM ciphers risks leaking the authentication key
Priority LOW 28
Pion DTLS is a Go implementation of Datagram Transport Layer Security.
TI-2025-31220 CVE-2025-49140 · GHSA-f26w-gh5m-qq77
Pion Interceptor's improper RTP padding handling allows remote crash for SFU users (DoS)
Priority LOW 39
Pion Interceptor is a framework for building RTP/RTCP communication software.
TI-2022-11765 CVE-2022-29222 · GHSA-w45j-f832-hxvh
Improper Certificate Validation in Pion DTLS
Priority LOW 34
Pion DTLS is a Go implementation of Datagram Transport Layer Security.
TI-2022-11732 CVE-2022-29189 · GHSA-cx94-mrg9-rq4j
Buffer for inbound DTLS fragments has no limit
Priority LOW 34
Pion DTLS is a Go implementation of Datagram Transport Layer Security.
TI-2022-11733 CVE-2022-29190 · GHSA-cm8f-h6j3-p25c
Header reconstruction method can be thrown into an infinite loop in Pion DTLS
Priority MEDIUM 42
Pion DTLS is a Go implementation of Datagram Transport Layer Security.
TI-2019-15006 CVE-2019-20786 · GHSA-7gfg-6934-mqq2
handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application…
Priority MEDIUM 48
handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to inject arbitrary unencrypted data after handshake completion.