Pion vulnerabilities
We track 3 vulnerabilities in Pion products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 9, 2025.
Latest Pion vulnerabilities
- 7.5 High severity
interceptor: Allocation of Resources Without Limits or Throttling
Pion Interceptor is a framework for building RTP/RTCP communication software. Versions v0.1.36 through v0.1.38 contain a bug in a RTP packet factory that can be exploited to trigger a panic with Pion based SFU via crafted RTP packets, This only affect users th
- 7.5 High severity
dtls: Improper Certificate Validation
Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.5, a DTLS Client could provide a Certificate that it doesn't posses the private key for and Pion DTLS wouldn't reject it. This issue affects users that are using Client
- 7.5 High severity
dtls: Loop with Unreachable Exit Condition
Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, an attacker can send packets that sends Pion DTLS into an infinite loop when processing. Version 2.1.4 contains a patch for this issue. There are currently no known