Go/github.com/pion/dtls/v3 CVE-2026-54908: unknown, EPSS 0.54%
Panic while parsing crafted ECDHE_PSK ServerKeyExchange in github.com/pion/dtls/v3
Action: Upgrade github.com/pion/dtls/v3 to 3.1.4 or later.
go get github.com/pion/dtls/v3@v3.1.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.4 | - |
Fixed versions
| 3.1.4 |
Sources
- osv: GO-2026-6165
- https://github.com/pion/dtls/security/advisories/GHSA-wg4g-wm44-ch5j
- https://github.com/pion/dtls/pull/839
- https://github.com/pion/dtls/commit/49458d604a4f3ebce1bf9587a0f3e5f3f6b4a55e
- https://github.com/pion/dtls/releases/tag/v3.1.4
CVE-2026-54908 · published · modified · JSON