CVE-2026-54909 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, spegel-fips, rke2-runtime, kubo, spegel, stunnerd, kubo-fips, op-geth, k3s, ipfs-cluster-fips, rke2-runtime-fips, livekit-egress...

Linux Distros Unpatched Vulnerability : CVE-2026-54909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in...

CVE-2026-54909

CVE-2026-54909 affects the Go library pion/stun. The vulnerability arises when parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN/ICE Binding responses, where XORMappedAddress.GetFromAs can panic. This leads to a remote denial of service. The issue is fixed in version 3.1.3; upgrading...