CVE-2026-14149

creationtimestamp| type| source ---|---|--- 2026-07-01 23:08:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116847233351358654 2026-07-02 08:22:06+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 19:40:30+00:00| seen|...

CVE-2026-14040

creationtimestamp| type| source ---|---|--- 2026-07-01 21:26:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmhg7vyuq2r 2026-07-01 23:21:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116847286375190062 2026-07-02 07:50:17+00:00| seen|...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the ServerKeyExchange message parsing process. An attacker can cause a panic in the application by sending a specially crafted ECDHEPSK ServerKeyExchange message. Remediation There is no fixed version for...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the ServerKeyExchange message parsing process. An attacker can cause a panic in the application by sending a specially crafted ECDHEPSK ServerKeyExchange message. Remediation Upgrade...

Out-of-bounds Read

Overview github.com/pion/dtls/v3 is a DTLS 1.2 Server/Client implementation for Go. Affected versions of this package are vulnerable to Out-of-bounds Read through the ServerKeyExchange message parsing process. An attacker can cause a panic in the application by sending a specially crafted ECDHEPS...

Out-of-bounds Read

Overview github.com/pion/dtls is a DTLS 1.2 Server/Client implementation for Go. Affected versions of this package are vulnerable to Out-of-bounds Read through the ServerKeyExchange message parsing process. An attacker can cause a panic in the application by sending a specially crafted ECDHEPSK...

CVE-2026-54908

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHEPSK ServerKeyExchange message. This issue has been fixed in version 3.1.4...

UBUNTU-CVE-2026-54908

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHEPSK ServerKeyExchange message. This issue has been fixed in version 3.1.4...

CVE-2026-54908 Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHEPSK ServerKeyExchange message. This issue has been fixed in version 3.1.4...

CVE-2026-54908

CVE-2026-54908 affects the Pion DTLS Go implementation. Versions prior to 3.1.4 are vulnerable to a remote Denial of Service caused by a panic while parsing a crafted ECDHE_PSK ServerKeyExchange message. The issue has been fixed in 3.1.4. No exploitation details are provided in the documents.

CVE-2026-54908 Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHEPSK ServerKeyExchange message. This issue has been fixed in version 3.1.4...

CVE-2026-54908

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHEPSK ServerKeyExchange message. This issue has been fixed in version 3.1.4...

CVE-2026-13835

creationtimestamp| type| source ---|---|--- 2026-07-01 06:02:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116843200825115865 2026-07-02 07:20:20+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:16:12+00:00| seen|...

CVE-2026-13844

creationtimestamp| type| source ---|---|--- 2026-07-01 05:49:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116843147892992564 2026-07-02 01:09:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmtui7ukz22 2026-07-02 07:20:44+00:00| seen|...

CVE-2026-13821

creationtimestamp| type| source ---|---|--- 2026-07-01 05:35:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116843094682918653 2026-07-01 19:39:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmbgibvhs2y 2026-07-02 01:05:22+00:00| seen|...

CVE-2026-13805

creationtimestamp| type| source ---|---|--- 2026-07-01 05:22:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116843042073075587 2026-07-02 07:19:14+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 12:29:12+00:00| seen|...

CVE-2026-13787

creationtimestamp| type| source ---|---|--- 2026-07-01 04:55:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116842935926725213 2026-07-02 01:07:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmtrazirz22 2026-07-02 07:18:36+00:00| seen|...

PT-2026-54849

Name of the Vulnerable Software and Affected Versions Pion DTLS versions prior to 3.1.4 Description A remote denial of service occurs when the software parses a specially crafted ECDHE PSK ServerKeyExchange message, leading to a panic. A panic is a runtime error in Go that causes the program to...

BIT-ENVOY-2026-48090 Envoy HTTP: OAuth2 filter late async token completion after stream teardown (UAF / crash risk)

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, the HTTP OAuth2 filter envoy.filters.http.oauth2 can leave an in-flight async token exchange attached to a downstream stream that has already been torn down. A late...

CVE-2025-23351

creationtimestamp| type| source ---|---|--- 2026-06-30 16:30:28+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116840007230776932 2026-07-01 17:03:35+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mplypz6an627 2026-07-02 01:57:01+00:00| seen|...