Go PACKAGE

github.com/pion/dtls v1.5.4

Warn

PkgFire would install this release with a warning.·Checked 3 hours ago·Published 10 November 2019

pkg.go.dev

Why

  • warnVulnerability

    Usage of random nonce generation with AES GCM ciphers risks leaking the authentication key in github.com/pion/dtls

  • warnVulnerability

    Panic during unmarshal of Hello Verify Request in github.com/pion/dtls/v2

  • warnVulnerability

    Pion DTLS's usage of random nonce generation with AES GCM ciphers risks leaking the authentication key

  • warnVulnerability

    Pion DTLS Header reconstruction method can be thrown into an infinite loop (fixed in 2.1.4)

  • warnVulnerability

    Pion/DTLS contains buffer for inbound DTLS fragments with no limit (fixed in 2.1.4)

  • warnVulnerability

    Panic during unmarshal of Hello Verify Request in github.com/pion/dtls/v2

  • warnVulnerability

    Pion/DLTS Accepts Client Certificates Without CertificateVerify (fixed in 2.1.5)

Check every dependency before it installs

This page is one release. PkgFire checks every package in your lockfile, on every install and in every pull request, and blocks the bad ones before they run.

Start free How it works