CVE-2026-54908
MediumAdvisory
Published 31 Jul 2026In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.3
- base score, highest
- EPSS
- 0.005
- 44th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 51
- of 17,781 indexed, latest versions
- Container images
- 35
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Pion DTLS vulnerable to denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message
Carried by container images the latest versions of 51 of 17,781 indexed charts deploy, on 35 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v3.0.4, v3.0.6, v3.0.7, v3.0.9+5 more | 3.1.4 | 35 |
- OSV records
- GHSA-wg4g-wm44-ch5j
- Also known as
- GO-2026-6165
Charts affected
51 by stars
Container images carrying it
35 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ethpandaops/ | 74d4cf2c436c | github.com/ | 3.1.4 | 10 |
| rancher/ | 5f6c4dc52a05 | github.com/ | 3.1.4 | 4 |
| ipfs/ | a83266c524f1 | github.com/ | 3.1.4 | 2 |
| l7mp/ | 0d2094060b72 | github.com/ | 3.1.4 | 2 |
| obolnetwork/ | 278c7e2897b6 | github.com/ | 3.1.4 | 2 |
| ghcr.io/ | 4768ea1c5fd2 | github.com/ | 3.1.4 | 2 |
| ghcr.io/ | 612d76760b54 | github.com/ | 3.1.4 | 2 |
| ghcr.io/ | a1bc133af84e | github.com/ | 3.1.4 | 2 |
| bluenviron/ | 9e39256d1ba3 | github.com/ | 3.1.4 | 1 |
| ethereum/ | 37575ec10fbc | github.com/ | 3.1.4 | 1 |
| ethereum/ | b8ab3451a117 | github.com/ | 3.1.4 | 1 |
| ethpandaops/ | 2381ea793a12 | github.com/ | 3.1.4 | 1 |
| ethpandaops/ | c937f4ba737c | github.com/ | 3.1.4 | 1 |
| homeassistant/ | 5a531753cea9 | github.com/ | 3.1.4 | 1 |
| ipfs/ | 0661819c2e09 | github.com/ | 3.1.4 | 1 |
| l7mp/ | 2f8114477ba6 | github.com/ | 3.1.4 | 1 |
| livekit/ | 3602a85840d5 | github.com/ | 3.1.4 | 1 |
| mattermost/ | a27058aaa53a | github.com/ | 3.1.4 | 1 |
| netbirdio/ | 3086534361a1 | github.com/ | 3.1.4 | 1 |
| netbirdio/ | e71f39cefcd9 | github.com/ | 3.1.4 | 1 |
| netbirdio/ | 3104d5ca3a76 | github.com/ | 3.1.4 | 1 |
| obolnetwork/ | e263be0a7440 | github.com/ | 3.1.4 | 1 |
| peterdavehello/ | 0cc12d36d312 | github.com/ | 3.1.4 | 1 |
| thetorproject/ | 1ddc5069d354 | github.com/ | 3.1.4 | 1 |
| ghcr.io/ | 951d71162065 | github.com/ | 3.1.4 | 1 |
| ghcr.io/ | 4e872bc016e8 | github.com/ | 3.1.4 | 1 |
| ghcr.io/ | 79df4fb20322 | github.com/ | 3.1.4 | 1 |
| ghcr.io/ | 032e977d9adf | github.com/ | 3.1.4 | 1 |
| ghcr.io/ | 372d991e5888 | github.com/ | 3.1.4 | 1 |
| ghcr.io/ | 56690a89c79a | github.com/ | 3.1.4 | 1 |
| ghcr.io/ | 9a5a3eb4a213 | github.com/ | 3.1.4 | 1 |
| ghcr.io/ | 067e54e2e107 | github.com/ | 3.1.4 | 1 |
| ghcr.io/ | 97d2d9ccd7a5 | github.com/ | 3.1.4 | 1 |
| ghcr.io/ | 26c60b05e08a | github.com/ | 3.1.4 | 1 |
| quay.io/ | d78cd113b2bc | github.com/ | 3.1.4 | 1 |