crates.io/mediasoup CVE-2026-55663: medium 5.6, EPSS 0.19%
mediasoup: SCTP state cookie lacks cryptographic authentication, enabling unauthorized association establishment (RFC 9260 violation)
Action: Upgrade mediasoup to 0.22.5 or later.
cargo update -p mediasoup --precise 0.22.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.22.0 | 0.22.5 | - |
Fixed versions
| 0.22.5 |
Sources
- osv: GHSA-p7x2-g5cq-fhmq#crates.io/mediasoup
- https://github.com/versatica/mediasoup/security/advisories/GHSA-p7x2-g5cq-fhmq
- https://github.com/versatica/mediasoup/pull/1829
- https://github.com/versatica/mediasoup/commit/9c1a90a8f9206b965e727d134846fb42df4980a7
- https://github.com/versatica/mediasoup
- https://github.com/versatica/mediasoup/releases/tag/3.20.6
CVE-2026-55663 · published · modified · JSON