CVE-2021-28681
2 advisories.
Go/github.com/pion/webrtc/v3 CVE-2021-28681: medium 5.3, EPSS 0.68%
In github.com/pion/webrtc, failed DTLS certificate verification doesn't stop data channel communication
Action: Upgrade github.com/pion/webrtc/v3 to 3.0.15 or later.
go get github.com/pion/webrtc/v3@v3.0.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.15 | - |
Fixed versions
| 3.0.15 |
Sources
- osv: GHSA-74xm-qj29-cq8p
- https://github.com/pion/webrtc/security/advisories/GHSA-74xm-qj29-cq8p
- https://nvd.nist.gov/vuln/detail/CVE-2021-28681
- https://github.com/pion/webrtc/issues/1708
- https://github.com/pion/webrtc/pull/1709
- https://github.com/pion/webrtc/commit/545613dcdeb5dedb01cce94175f40bcbe045df2e
- https://github.com/pion/webrtc
- https://pkg.go.dev/vuln/GO-2021-0104
CVE-2021-28681 · published · modified · JSON
Go/github.com/pion/webrtc/v3 CVE-2021-28681: unknown, EPSS 0.68%
Authorization bypass in github.com/pion/webrtc/v3
Action: Upgrade github.com/pion/webrtc/v3 to 3.0.15 or later.
go get github.com/pion/webrtc/v3@v3.0.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.15 | - |
Fixed versions
| 3.0.15 |
Sources
- osv: GO-2021-0104
- https://github.com/pion/webrtc/pull/1709
- https://github.com/pion/webrtc/commit/545613dcdeb5dedb01cce94175f40bcbe045df2e
- https://github.com/pion/webrtc/issues/1708
CVE-2021-28681 · published · modified · JSON