{"action":"Upgrade github.com/pion/dtls to 2.1.4 or later.","affected":[{"fixed":"2.1.4","introduced":"0"}],"component":"github.com/pion/dtls","cve_ids":["CVE-2022-29190"],"ecosystem":"Go","epss":0.01744,"exploited":false,"fixed_versions":["2.1.4"],"ghsa_id":"GHSA-cm8f-h6j3-p25c","id":"tcs_01M5KF7HMDSA1EHBE955CABT96","modified_at":"2023-11-08T04:09:09.359339Z","published_at":"2022-05-24T22:05:00Z","references":["https://osv.dev/vulnerability/GHSA-cm8f-h6j3-p25c","https://github.com/pion/dtls/security/advisories/GHSA-cm8f-h6j3-p25c","https://nvd.nist.gov/vuln/detail/CVE-2022-29190","https://github.com/pion/dtls/commit/e0b2ce3592e8e7d73713ac67b363a2e192a4cecf","https://github.com/pion/dtls/releases/tag/v2.1.4","https://pkg.go.dev/vuln/GO-2022-0460"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-cm8f-h6j3-p25c","url":"https://osv.dev/vulnerability/GHSA-cm8f-h6j3-p25c"}],"summary":"Pion DTLS Header reconstruction method can be thrown into an infinite loop"}