Threats affecting pkg:golang/github.com/pion/stun

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.6%	CVE-2026-54909pion stun · Improper Input Validation Medium5.3EPSS 0.6%2026-07-31CVE Database V5CVE-2026-54909 pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3. EPSS 0.6%Vulnerability CWE-20 #ghsa-34rh-wp3j-6cxc #go	CVE Database V5	2026-07-31

Page 1 of 1