What is GHSA-wg4g-wm44-ch5j?

GHSA-wg4g-wm44-ch5j is a security advisory published by GitHub Security Advisories with Medium severity. Pion DTLS vulnerable to denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message

Which CVE IDs does GHSA-wg4g-wm44-ch5j cover?

GHSA-wg4g-wm44-ch5j covers the following CVE IDs: CVE-2026-54908. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-wg4g-wm44-ch5j?

GHSA-wg4g-wm44-ch5j affects 1 product, including: go/github.com/pion/dtls/v3:\u003c= 3.1.2.

GHSA-wg4g-wm44-ch5jMedium

Pion DTLS vulnerable to denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message

Vendor

GitHub Security Advisories

Published

July 31, 2026

Last Modified

July 31, 2026

🔗 CVE IDs covered (1)

CVE-2026-54908 →

📋 Description

Impact

Remote denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message.

Patches

Upgrade to v3.1.4 or later. This version includes this patch https://github.com/pion/dtls/pull/839 which fixes the issue.

Workarounds

No work around; please upgrade to v3.1.4 or a newer version.

🎯 Affected products1

go/github.com/pion/dtls/v3:<= 3.1.2

🔗 References (6)

https://github.com/pion/dtls/security/advisories/GHSA-wg4g-wm44-ch5j
https://nvd.nist.gov/vuln/detail/CVE-2026-54908
https://github.com/pion/dtls/pull/839
https://github.com/pion/dtls/commit/49458d604a4f3ebce1bf9587a0f3e5f3f6b4a55e
https://github.com/pion/dtls/releases/tag/v3.1.3
https://github.com/advisories/GHSA-wg4g-wm44-ch5j