Inadequate Encryption Strength

Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength due to the use of the random nonce generation with AES GCM ciphers. An attacker can obtain the authentication key and spoof data by exploiting nonce reuse within a session. Remediation There is no fixed...

EUVD-2021-1278

Malware in sbrugna...

Pion DTLS 安全漏洞

Pion DTLS is a Go language based implementation of DTLS Packet Transport Layer Security Protocol. A security vulnerability exists in Pion DTLS versions prior to 2.1.4. An attacker exploited the vulnerability to send packets sending Pion DTLS into an infinite loop...