{"schemaVersion":3,"id":"CVE-2026-54908","aliases":["UBUNTU-CVE-2026-54908","DEBIAN-CVE-2026-54908","CGA-2hw7-w253-vwgc","CGA-46q5-fhf2-3frj","CGA-46w7-j3v8-xx36","CGA-4g32-w6w6-2w4j","CGA-4rqc-q3jr-7fjq","CGA-556g-wv2x-9w3c","CGA-59wc-rq88-q23x","CGA-6343-wf53-p7vv","CGA-64xf-9fg5-3ch2","CGA-74rv-92pv-98xc","CGA-7f87-42j7-x346","CGA-7ph2-75xp-qj5q","CGA-8ff2-fq4r-j2j9","CGA-9vc8-3cpg-56pq","CGA-cv3v-v9cj-469v","CGA-frp9-fq8h-9qjf","CGA-gwf4-5mrp-cvpp","CGA-m3r5-4rr5-2cgx","CGA-mcq5-2p7q-q3fw","CGA-mj58-245p-vw3g","CGA-pf67-57w5-p256","CGA-pjvh-3c4w-m4rx","CGA-q26r-798w-x2r8","CGA-qj63-v7pj-32hw","CGA-qmh9-hv3m-h99w","CGA-rmpf-9f57-grjr","CGA-rx5p-w939-5gh3","CGA-v6qr-8qcv-3r82","CGA-vrr9-49fg-qwfg","CGA-vwcw-33q4-w3x7","CGA-vwm8-p96g-2jhq","CGA-vwpx-qg7g-j9f5","CGA-wq53-j4m7-cp9c","CGA-x859-p4w6-qg56","CGA-xf9h-6cqp-xmg3","CGA-xmr2-x6j9-f3pr","GHSA-wg4g-wm44-ch5j","GO-2026-6165","CGA-22rm-6pg2-vcc5","CGA-28mp-679h-c57v","CGA-2vgv-mrvv-hrxv","CGA-33vw-977g-fq6w","CGA-34g3-xvx7-588v","CGA-34rj-cjqx-g363","CGA-3rxv-6483-7jcw","CGA-3x36-7jv4-3cgr","CGA-4mw4-wc56-89fx","CGA-756h-3hph-vx2q","CGA-759x-2rp8-cmrc","CGA-7vmq-qj26-5gcg","CGA-84gv-627m-4f3w","CGA-8ffm-76c3-wfh2","CGA-8v58-3x88-9pgq","CGA-c59g-fpv5-2rp5","CGA-g9m4-5844-j9mg","CGA-gxr2-98h6-hxhj","CGA-h452-65mx-65cr","CGA-h8vw-vrxq-764x","CGA-hg8q-379g-vfgg","CGA-hv8h-ghjp-28mv","CGA-jr58-88vc-jvx7","CGA-p38m-v8xr-xg5g","CGA-pghm-hrc6-9qv2","CGA-pq9m-cwrc-j337","CGA-q6c8-78x2-2j93","CGA-r2rc-822j-h3wh","CGA-r82m-r63q-844q","CGA-rr42-43g6-q6xw","CGA-vhg7-g6f8-33ff","CGA-vmjx-73p9-74jw","CGA-vqjm-96m8-fpxf","CGA-x5g3-6398-7536","CGA-xwmq-8g9f-jqm7","CGA-xx6v-6hp4-q5g3"],"status":"published","duplicateOf":null,"title":null,"description":"Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message. This issue has been fixed in version 3.1.4.","dates":{"published":"2026-07-01T19:34:24.014Z","modified":"2026-07-02T15:54:54.578Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.3,"severity":"medium","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":6.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Ubuntu","score":6.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Debian","score":6.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":6.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Go","score":6.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":6.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":6.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00542,"percentile":0.44329,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.00542},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00542,"percentile":0.44329}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00542,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00542,"percentile":0.44329}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-125","name":"Out-of-bounds Read","description":"The product reads data past the end, or before the beginning, of the intended buffer.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/125.html"},{"id":"CWE-248","name":"Uncaught Exception","description":"An exception is thrown from a function, but it is not caught.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/248.html"}],"affected":[{"vendor":"chainguard","product":"ipfs-cluster","name":"ipfs-cluster","label":"ipfs-cluster","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ipfs-cluster","purlType":"apk","versions":[{"text":"< 1.1.6-r12","noFixRecorded":false,"fixedIn":null},{"text":"< 1.1.6-r18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.6-r12 | < 1.1.6-r18","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ipfs-cluster-fips","name":"ipfs-cluster-fips","label":"ipfs-cluster-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ipfs-cluster-fips","purlType":"apk","versions":[{"text":"< 1.1.6-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.6-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s","name":"k3s","label":"k3s","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s","purlType":"apk","versions":[{"text":"< 1.36.2.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.36.2.1-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-1.31","name":"k3s-1.31","label":"k3s-1.31","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-1.31","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-1.32","name":"k3s-1.32","label":"k3s-1.32","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-1.32","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-1.33","name":"k3s-1.33","label":"k3s-1.33","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-1.33","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-1.34","name":"k3s-1.34","label":"k3s-1.34","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-1.34","purlType":"apk","versions":[{"text":"< 1.34.9.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.34.9.1-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-1.35","name":"k3s-1.35","label":"k3s-1.35","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-1.35","purlType":"apk","versions":[{"text":"< 1.35.6.1-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.35.6.1-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-static","name":"k3s-static","label":"k3s-static","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-static","purlType":"apk","versions":[{"text":"< 1.36.2.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.36.2.1-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-static-1.31","name":"k3s-static-1.31","label":"k3s-static-1.31","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-static-1.31","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-static-1.32","name":"k3s-static-1.32","label":"k3s-static-1.32","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-static-1.32","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-static-1.33","name":"k3s-static-1.33","label":"k3s-static-1.33","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-static-1.33","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-static-1.34","name":"k3s-static-1.34","label":"k3s-static-1.34","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-static-1.34","purlType":"apk","versions":[{"text":"< 1.34.9.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.34.9.1-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-static-1.35","name":"k3s-static-1.35","label":"k3s-static-1.35","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-static-1.35","purlType":"apk","versions":[{"text":"< 1.35.6.1-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.35.6.1-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubo","name":"kubo","label":"kubo","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubo","purlType":"apk","versions":[{"text":"< 0.42.0-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.42.0-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubo-compat","name":"kubo-compat","label":"kubo-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubo-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubo-fips","name":"kubo-fips","label":"kubo-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubo-fips","purlType":"apk","versions":[{"text":"< 0.42.0-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.42.0-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"livekit-egress","name":"livekit-egress","label":"livekit-egress","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/livekit-egress","purlType":"apk","versions":[{"text":"< 1.13.0-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.13.0-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-1.32","name":"rke2-runtime-1.32","label":"rke2-runtime-1.32","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-1.32","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-1.33","name":"rke2-runtime-1.33","label":"rke2-runtime-1.33","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-1.33","purlType":"apk","versions":[{"text":"< 1.33.13.2.1-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.33.13.2.1-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-1.34","name":"rke2-runtime-1.34","label":"rke2-runtime-1.34","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-1.34","purlType":"apk","versions":[{"text":"< 1.34.9.2.1-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.34.9.2.1-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-1.35","name":"rke2-runtime-1.35","label":"rke2-runtime-1.35","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-1.35","purlType":"apk","versions":[{"text":"< 1.35.6.2.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.35.6.2.1-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-1.36","name":"rke2-runtime-1.36","label":"rke2-runtime-1.36","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-1.36","purlType":"apk","versions":[{"text":"< 1.36.2.2.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.36.2.2.1-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-fips-1.32","name":"rke2-runtime-fips-1.32","label":"rke2-runtime-fips-1.32","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-fips-1.32","purlType":"apk","versions":[{"text":"< 1.32.13.2.2-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.32.13.2.2-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-fips-1.33","name":"rke2-runtime-fips-1.33","label":"rke2-runtime-fips-1.33","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-fips-1.33","purlType":"apk","versions":[{"text":"< 1.33.13.2.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.33.13.2.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-fips-1.34","name":"rke2-runtime-fips-1.34","label":"rke2-runtime-fips-1.34","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-fips-1.34","purlType":"apk","versions":[{"text":"< 1.34.9.2.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.34.9.2.1-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-fips-1.35","name":"rke2-runtime-fips-1.35","label":"rke2-runtime-fips-1.35","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-fips-1.35","purlType":"apk","versions":[{"text":"< 1.35.6.2.1-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.35.6.2.1-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-fips-1.36","name":"rke2-runtime-fips-1.36","label":"rke2-runtime-fips-1.36","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-fips-1.36","purlType":"apk","versions":[{"text":"< 1.36.1.2.2-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.36.1.2.2-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spegel","name":"spegel","label":"spegel","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spegel","purlType":"apk","versions":[{"text":"< 0.7.4-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.7.4-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spegel-fips","name":"spegel-fips","label":"spegel-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spegel-fips","purlType":"apk","versions":[{"text":"< 0.7.4-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.7.4-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"telegraf-1.37","name":"telegraf-1.37","label":"telegraf-1.37","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/telegraf-1.37","purlType":"apk","versions":[{"text":"< 1.37.3-r22","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.37.3-r22","eol":null,"hubHref":null},{"vendor":"chainguard","product":"telegraf-1.38","name":"telegraf-1.38","label":"telegraf-1.38","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/telegraf-1.38","purlType":"apk","versions":[{"text":"< 1.38.4-r18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.38.4-r18","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ipfs-cluster","name":"ipfs-cluster","label":"ipfs-cluster","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ipfs-cluster","purlType":"apk","versions":[{"text":"< 1.1.6-r12","noFixRecorded":false,"fixedIn":null},{"text":"< 1.1.6-r18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.6-r12 | < 1.1.6-r18","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s","name":"k3s","label":"k3s","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s","purlType":"apk","versions":[{"text":"< 1.36.2.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.36.2.1-r9","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-1.32","name":"k3s-1.32","label":"k3s-1.32","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-1.32","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-1.33","name":"k3s-1.33","label":"k3s-1.33","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-1.33","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-1.34","name":"k3s-1.34","label":"k3s-1.34","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-1.34","purlType":"apk","versions":[{"text":"< 1.34.9.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.34.9.1-r9","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-1.35","name":"k3s-1.35","label":"k3s-1.35","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-1.35","purlType":"apk","versions":[{"text":"< 1.35.6.1-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.35.6.1-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-static","name":"k3s-static","label":"k3s-static","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-static","purlType":"apk","versions":[{"text":"< 1.36.2.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.36.2.1-r9","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-static-1.32","name":"k3s-static-1.32","label":"k3s-static-1.32","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-static-1.32","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-static-1.33","name":"k3s-static-1.33","label":"k3s-static-1.33","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-static-1.33","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-static-1.34","name":"k3s-static-1.34","label":"k3s-static-1.34","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-static-1.34","purlType":"apk","versions":[{"text":"< 1.34.9.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.34.9.1-r9","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-static-1.35","name":"k3s-static-1.35","label":"k3s-static-1.35","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-static-1.35","purlType":"apk","versions":[{"text":"< 1.35.6.1-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.35.6.1-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubo","name":"kubo","label":"kubo","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubo","purlType":"apk","versions":[{"text":"< 0.42.0-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.42.0-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubo-compat","name":"kubo-compat","label":"kubo-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubo-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"spegel","name":"spegel","label":"spegel","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/spegel","purlType":"apk","versions":[{"text":"< 0.7.4-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.7.4-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"telegraf-1.37","name":"telegraf-1.37","label":"telegraf-1.37","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/telegraf-1.37","purlType":"apk","versions":[{"text":"< 1.37.3-r22","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.37.3-r22","eol":null,"hubHref":null},{"vendor":"wolfi","product":"telegraf-1.38","name":"telegraf-1.38","label":"telegraf-1.38","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/telegraf-1.38","purlType":"apk","versions":[{"text":"< 1.38.4-r18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.38.4-r18","eol":null,"hubHref":null},{"vendor":"debian","product":"golang-github-pion-dtls-v3","name":"golang-github-pion-dtls-v3","label":"golang-github-pion-dtls-v3","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/golang-github-pion-dtls-v3","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"golang-github-pion-dtls.v2","name":"golang-github-pion-dtls.v2","label":"golang-github-pion-dtls.v2","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/golang-github-pion-dtls.v2","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-github-pion-dtls-v3","name":"golang-github-pion-dtls-v3","label":"golang-github-pion-dtls-v3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-github-pion-dtls-v3","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-github-pion-dtls.v2","name":"golang-github-pion-dtls.v2","label":"golang-github-pion-dtls.v2","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-github-pion-dtls.v2","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"github.com/pion/dtls","product":"v3","name":"github.com/pion/dtls/v3","label":"v3","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/github.com/pion/dtls/v3","purlType":"golang","versions":[{"text":"< 3.1.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.4","eol":null,"hubHref":null},{"vendor":"pion","product":"dtls","name":"dtls","label":"dtls","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 3.1.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.4","eol":null,"hubHref":"/vendor/pion/dtls"}],"affectedCount":54,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/pion/dtls/security/advisories/GHSA-wg4g-wm44-ch5j","label":"github.com/pion/dtls/security/advisories/GHSA-wg4g-wm44-ch5j","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB"]},{"url":"https://github.com/pion/dtls/pull/839","label":"github.com/pion/dtls/pull/839","hostname":"github.com","tags":["X Refsource MISC","REPORT","FIX","WEB"]},{"url":"https://ubuntu.com/security/CVE-2026-54908","label":"ubuntu.com/security/CVE-2026-54908","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-54908","label":"www.cve.org/CVERecord?id=CVE-2026-54908","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-54908","label":"security-tracker.debian.org/tracker/CVE-2026-54908","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54908.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54908.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54908","label":"nvd.nist.gov/vuln/detail/CVE-2026-54908","hostname":"nvd.nist.gov","tags":["Advisory","Oval"]},{"url":"https://github.com/pion/dtls/commit/49458d604a4f3ebce1bf9587a0f3e5f3f6b4a55e","label":"github.com/pion/dtls/commit/49458d604a4f3ebce1bf9587a0f3e5f3f6b4a55e","hostname":"github.com","tags":["WEB","FIX"]},{"url":"https://github.com/pion/dtls","label":"github.com/pion/dtls","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/pion/dtls/releases/tag/v3.1.3","label":"github.com/pion/dtls/releases/tag/v3.1.3","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/pion/dtls/releases/tag/v3.1.4","label":"github.com/pion/dtls/releases/tag/v3.1.4","hostname":"github.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:21761-1","SUSE-SU-2026:23625-1"],"duplicates":[],"related":["CGA-PJW3-CFXC-7JWF","OPENSUSE-SU-2026:21761-1","SUSE-SU-2026:23625-1"]},"timeline":[{"kind":"published","date":"2026-07-01T19:34:24.014Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-07-02T15:54:54.578Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":25,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T09:35:29.251Z","stale":false,"partial":false}}