Skip to content
OpenAdvisories

Package · Go

github.com/pion/dtls/v3

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-54908

    Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message

    Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message. This issue has been fixed in version 3.1.4.

    pion dtls golang-github-pion-dtls-v3 golang-github-pion-dtls.v2 Debian Ubuntu Go
  • Medium 5.9
    CVE-2026-26014

    Pion DTLS uses random nonce generation with AES GCM ciphers risks leaking the authentication key

    Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.0.10 and 3.1.0 use random nonce generation with AES GCM ciphers, which makes it easier for remote attackers to obtain the authentication key and spoof …

    pion dtls github.com/pion/dtls github.com/pion/dtls/v2 Debian Ubuntu Go