CVE-2026-54908

Description

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message. This issue has been fixed in version 3.1.4.

References

• https://github.com/pion/dtls/pull/839
• https://github.com/pion/dtls/security/advisories/GHSA-wg4g-wm44-ch5j