{"schemaVersion":3,"id":"CVE-2026-54909","aliases":["UBUNTU-CVE-2026-54909","DEBIAN-CVE-2026-54909","CGA-232c-gqxj-f29v","CGA-299m-f3gm-9578","CGA-3q5x-965w-4f2h","CGA-3vvv-9w52-775f","CGA-4546-cpjr-mgmr","CGA-4m4q-w2xq-fmf9","CGA-4mpc-rxqh-54vc","CGA-53fj-qcpp-c2c5","CGA-626r-cpqv-43mg","CGA-653r-85vx-hcqp","CGA-68r2-m48h-m6m8","CGA-6967-w3vp-w7mx","CGA-6w4v-h9f2-2f24","CGA-74qj-rcgj-f26p","CGA-76j3-46vj-jvcw","CGA-775j-3r5w-9cgw","CGA-7g4p-74q6-4cf4","CGA-83vw-2p5c-5chg","CGA-8833-f9px-xpvc","CGA-8c7j-9mf2-f592","CGA-8rrg-x6wv-p3xj","CGA-8rrp-2vh4-g8g7","CGA-c4g2-2f93-8gm2","CGA-c5mm-263v-4chj","CGA-c8w6-577g-8qw4","CGA-crwc-7w8q-7rf9","CGA-f5pr-cq6j-wqjw","CGA-fp5r-whpc-rfpm","CGA-fw8j-w5v6-j7pj","CGA-g3cf-2gff-2gmj","CGA-h335-rcrm-v2rm","CGA-h74r-47r8-xfq8","CGA-j6vq-52w9-w89j","CGA-jpx6-cg8w-fxrr","CGA-jqcr-rwj2-vhfx","CGA-mcpv-cqp8-9mw7","CGA-mp4g-f2hj-8f88","CGA-p283-9cjc-8qxq","CGA-p4wx-w7h5-gc8m","CGA-ph93-vrh3-c244","CGA-q8vq-5794-2qf7","CGA-qh4q-mm7x-8r8g","CGA-r233-77cq-g5wv","CGA-rfqf-2w5x-8vxr","CGA-rq5v-3j8f-7xwc","CGA-w97c-58jm-8h8j","CGA-wf6v-gjgc-6mqr","GHSA-34rh-wp3j-6cxc","GO-2026-6163","CGA-23cc-m82g-3vc7","CGA-3gch-w7fj-cxf4","CGA-3h9h-58p5-2886","CGA-3hv5-cj88-fjwr","CGA-3mj8-v2hp-6hp4","CGA-45w5-9r99-895h","CGA-4vv3-8548-w2rq","CGA-5jjc-h2vf-mfmc","CGA-62c3-whv3-cf3r","CGA-76g2-w83f-ggjc","CGA-7762-gm3h-fjfm","CGA-8567-g4pr-mr88","CGA-8vpm-rg32-w99v","CGA-8wmh-7gfq-rmjg","CGA-982x-fm7m-xf5h","CGA-9p7r-jjf4-xmg9","CGA-9v8x-c5rh-jfvw","CGA-c8rq-qpfq-q479","CGA-ccg4-7x9x-95p4","CGA-cp6v-gvfh-5jx9","CGA-cx8x-q3xm-37m8","CGA-f38v-3833-hx35","CGA-f967-w485-vgx7","CGA-fjhf-xv89-8vq6","CGA-g75v-6w42-jx3p","CGA-hgpv-38wp-jqwc","CGA-hv5m-qcq8-v8x6","CGA-hwx5-ppvq-4h5m","CGA-j358-8rwq-c7cq","CGA-jhp7-873h-38vh","CGA-jq55-vhp8-84v4","CGA-jr7q-mcc3-9rrc","CGA-mvm5-6pvm-g78p","CGA-mvrh-gprc-p83f","CGA-pf74-rgcj-92p2","CGA-pqwp-54fx-9f62","CGA-q7c4-x2mj-5v2w","CGA-qxfr-9w9c-rg28","CGA-r6p3-fxp2-3pgr","CGA-rgpj-599j-3549","CGA-vr7c-pjmg-q2cr","CGA-vv84-79gc-j326","CGA-w3g3-32q7-3673","CGA-wff4-p2f4-xxx9","CGA-wr58-hpvm-w8f8","CGA-xp2q-g2wc-69fh"],"status":"published","duplicateOf":null,"title":null,"description":"pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3.","dates":{"published":"2026-07-31T22:03:53.514Z","modified":"2026-08-03T17:30:22.558Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Go","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00644,"percentile":0.49985,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.273,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00371},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00644,"percentile":0.49985}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00371,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00644,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00644,"percentile":0.49985}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-20","name":"Improper Input Validation","description":"The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/20.html"}],"affected":[{"vendor":"chainguard","product":"ipfs-cluster","name":"ipfs-cluster","label":"ipfs-cluster","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ipfs-cluster","purlType":"apk","versions":[{"text":"< 1.1.6-r18","noFixRecorded":false,"fixedIn":null},{"text":"< 1.1.6-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.6-r18 | < 1.1.6-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ipfs-cluster-fips","name":"ipfs-cluster-fips","label":"ipfs-cluster-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ipfs-cluster-fips","purlType":"apk","versions":[{"text":"< 1.1.6-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.6-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s","name":"k3s","label":"k3s","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s","purlType":"apk","versions":[{"text":"< 1.36.2.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.36.2.1-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-1.31","name":"k3s-1.31","label":"k3s-1.31","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-1.31","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-1.32","name":"k3s-1.32","label":"k3s-1.32","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-1.32","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-1.33","name":"k3s-1.33","label":"k3s-1.33","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-1.33","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-1.34","name":"k3s-1.34","label":"k3s-1.34","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-1.34","purlType":"apk","versions":[{"text":"< 1.34.9.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.34.9.1-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-1.35","name":"k3s-1.35","label":"k3s-1.35","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-1.35","purlType":"apk","versions":[{"text":"< 1.35.6.1-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.35.6.1-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-static","name":"k3s-static","label":"k3s-static","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-static","purlType":"apk","versions":[{"text":"< 1.36.2.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.36.2.1-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-static-1.31","name":"k3s-static-1.31","label":"k3s-static-1.31","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-static-1.31","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-static-1.32","name":"k3s-static-1.32","label":"k3s-static-1.32","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-static-1.32","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-static-1.33","name":"k3s-static-1.33","label":"k3s-static-1.33","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-static-1.33","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-static-1.34","name":"k3s-static-1.34","label":"k3s-static-1.34","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-static-1.34","purlType":"apk","versions":[{"text":"< 1.34.9.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.34.9.1-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k3s-static-1.35","name":"k3s-static-1.35","label":"k3s-static-1.35","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k3s-static-1.35","purlType":"apk","versions":[{"text":"< 1.35.6.1-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.35.6.1-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubo","name":"kubo","label":"kubo","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubo","purlType":"apk","versions":[{"text":"< 0.42.0-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.42.0-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubo-compat","name":"kubo-compat","label":"kubo-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubo-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubo-fips","name":"kubo-fips","label":"kubo-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubo-fips","purlType":"apk","versions":[{"text":"< 0.42.0-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.42.0-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"livekit-egress","name":"livekit-egress","label":"livekit-egress","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/livekit-egress","purlType":"apk","versions":[{"text":"< 1.13.0-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.13.0-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"op-geth","name":"op-geth","label":"op-geth","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/op-geth","purlType":"apk","versions":[{"text":"< 1.101702.3-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.101702.3-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"op-geth-abigen","name":"op-geth-abigen","label":"op-geth-abigen","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/op-geth-abigen","purlType":"apk","versions":[{"text":"< 1.101702.3-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.101702.3-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"op-geth-clef","name":"op-geth-clef","label":"op-geth-clef","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/op-geth-clef","purlType":"apk","versions":[{"text":"< 1.101702.3-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.101702.3-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"op-geth-compat","name":"op-geth-compat","label":"op-geth-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/op-geth-compat","purlType":"apk","versions":[{"text":"< 1.101702.3-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.101702.3-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"op-geth-devp2p","name":"op-geth-devp2p","label":"op-geth-devp2p","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/op-geth-devp2p","purlType":"apk","versions":[{"text":"< 1.101702.3-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.101702.3-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"op-geth-evm","name":"op-geth-evm","label":"op-geth-evm","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/op-geth-evm","purlType":"apk","versions":[{"text":"< 1.101702.3-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.101702.3-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-1.32","name":"rke2-runtime-1.32","label":"rke2-runtime-1.32","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-1.32","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-1.33","name":"rke2-runtime-1.33","label":"rke2-runtime-1.33","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-1.33","purlType":"apk","versions":[{"text":"< 1.33.13.2.1-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.33.13.2.1-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-1.34","name":"rke2-runtime-1.34","label":"rke2-runtime-1.34","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-1.34","purlType":"apk","versions":[{"text":"< 1.34.9.2.1-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.34.9.2.1-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-1.35","name":"rke2-runtime-1.35","label":"rke2-runtime-1.35","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-1.35","purlType":"apk","versions":[{"text":"< 1.35.6.2.1-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.35.6.2.1-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-1.36","name":"rke2-runtime-1.36","label":"rke2-runtime-1.36","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-1.36","purlType":"apk","versions":[{"text":"< 1.36.2.2.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.36.2.2.1-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-fips-1.32","name":"rke2-runtime-fips-1.32","label":"rke2-runtime-fips-1.32","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-fips-1.32","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-fips-1.33","name":"rke2-runtime-fips-1.33","label":"rke2-runtime-fips-1.33","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-fips-1.33","purlType":"apk","versions":[{"text":"< 1.33.13.2.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.33.13.2.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-fips-1.34","name":"rke2-runtime-fips-1.34","label":"rke2-runtime-fips-1.34","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-fips-1.34","purlType":"apk","versions":[{"text":"< 1.34.9.2.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.34.9.2.1-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-fips-1.35","name":"rke2-runtime-fips-1.35","label":"rke2-runtime-fips-1.35","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-fips-1.35","purlType":"apk","versions":[{"text":"< 1.35.6.2.1-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.35.6.2.1-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"rke2-runtime-fips-1.36","name":"rke2-runtime-fips-1.36","label":"rke2-runtime-fips-1.36","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/rke2-runtime-fips-1.36","purlType":"apk","versions":[{"text":"< 1.36.1.2.2-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.36.1.2.2-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spegel","name":"spegel","label":"spegel","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spegel","purlType":"apk","versions":[{"text":"< 0.7.4-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.7.4-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spegel-fips","name":"spegel-fips","label":"spegel-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spegel-fips","purlType":"apk","versions":[{"text":"< 0.7.4-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.7.4-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"stunnerd","name":"stunnerd","label":"stunnerd","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/stunnerd","purlType":"apk","versions":[{"text":"< 1.2.1-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.1-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"ipfs-cluster","name":"ipfs-cluster","label":"ipfs-cluster","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/ipfs-cluster","purlType":"apk","versions":[{"text":"< 1.1.6-r18","noFixRecorded":false,"fixedIn":null},{"text":"< 1.1.6-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.6-r18 | < 1.1.6-r12","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s","name":"k3s","label":"k3s","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s","purlType":"apk","versions":[{"text":"< 1.36.2.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.36.2.1-r9","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-1.32","name":"k3s-1.32","label":"k3s-1.32","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-1.32","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-1.33","name":"k3s-1.33","label":"k3s-1.33","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-1.33","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-1.34","name":"k3s-1.34","label":"k3s-1.34","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-1.34","purlType":"apk","versions":[{"text":"< 1.34.9.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.34.9.1-r9","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-1.35","name":"k3s-1.35","label":"k3s-1.35","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-1.35","purlType":"apk","versions":[{"text":"< 1.35.6.1-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.35.6.1-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-static","name":"k3s-static","label":"k3s-static","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-static","purlType":"apk","versions":[{"text":"< 1.36.2.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.36.2.1-r9","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-static-1.32","name":"k3s-static-1.32","label":"k3s-static-1.32","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-static-1.32","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-static-1.33","name":"k3s-static-1.33","label":"k3s-static-1.33","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-static-1.33","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-static-1.34","name":"k3s-static-1.34","label":"k3s-static-1.34","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-static-1.34","purlType":"apk","versions":[{"text":"< 1.34.9.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.34.9.1-r9","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k3s-static-1.35","name":"k3s-static-1.35","label":"k3s-static-1.35","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k3s-static-1.35","purlType":"apk","versions":[{"text":"< 1.35.6.1-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.35.6.1-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubo","name":"kubo","label":"kubo","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubo","purlType":"apk","versions":[{"text":"< 0.42.0-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.42.0-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubo-compat","name":"kubo-compat","label":"kubo-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubo-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"op-geth","name":"op-geth","label":"op-geth","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/op-geth","purlType":"apk","versions":[{"text":"< 1.101702.3-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.101702.3-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"op-geth-abigen","name":"op-geth-abigen","label":"op-geth-abigen","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/op-geth-abigen","purlType":"apk","versions":[{"text":"< 1.101702.3-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.101702.3-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"op-geth-clef","name":"op-geth-clef","label":"op-geth-clef","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/op-geth-clef","purlType":"apk","versions":[{"text":"< 1.101702.3-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.101702.3-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"op-geth-compat","name":"op-geth-compat","label":"op-geth-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/op-geth-compat","purlType":"apk","versions":[{"text":"< 1.101702.3-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.101702.3-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"op-geth-devp2p","name":"op-geth-devp2p","label":"op-geth-devp2p","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/op-geth-devp2p","purlType":"apk","versions":[{"text":"< 1.101702.3-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.101702.3-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"op-geth-evm","name":"op-geth-evm","label":"op-geth-evm","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/op-geth-evm","purlType":"apk","versions":[{"text":"< 1.101702.3-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.101702.3-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"spegel","name":"spegel","label":"spegel","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/spegel","purlType":"apk","versions":[{"text":"< 0.7.4-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.7.4-r3","eol":null,"hubHref":null},{"vendor":"debian","product":"golang-github-pion-stun","name":"golang-github-pion-stun","label":"golang-github-pion-stun","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/golang-github-pion-stun","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"golang-github-pion-stun-v3","name":"golang-github-pion-stun-v3","label":"golang-github-pion-stun-v3","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/golang-github-pion-stun-v3","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-github-pion-stun","name":"golang-github-pion-stun","label":"golang-github-pion-stun","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-github-pion-stun","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-github-pion-stun-v3","name":"golang-github-pion-stun-v3","label":"golang-github-pion-stun-v3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-github-pion-stun-v3","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"github.com/pion","product":"stun","name":"github.com/pion/stun","label":"stun","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/github.com/pion/stun","purlType":"golang","versions":[{"text":"≤ 1.23.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.23.1","eol":null,"hubHref":null},{"vendor":"github.com/pion/stun","product":"v2","name":"github.com/pion/stun/v2","label":"v2","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/github.com/pion/stun/v2","purlType":"golang","versions":[{"text":"≤ 2.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.0.0","eol":null,"hubHref":null},{"vendor":"github.com/pion/stun","product":"v3","name":"github.com/pion/stun/v3","label":"v3","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/github.com/pion/stun/v3","purlType":"golang","versions":[{"text":"< 3.1.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.5","eol":null,"hubHref":null},{"vendor":"pion","product":"stun","name":"stun","label":"stun","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 3.1.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.3","eol":null,"hubHref":"/vendor/pion/stun"}],"affectedCount":65,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/pion/stun/security/advisories/GHSA-34rh-wp3j-6cxc","label":"github.com/pion/stun/security/advisories/GHSA-34rh-wp3j-6cxc","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB"]},{"url":"https://github.com/pion/stun/pull/278","label":"github.com/pion/stun/pull/278","hostname":"github.com","tags":["X Refsource MISC","REPORT","FIX","WEB"]},{"url":"https://github.com/pion/stun/commit/fa9f074a33a8059c76c960b1fbee39f308002423","label":"github.com/pion/stun/commit/fa9f074a33a8059c76c960b1fbee39f308002423","hostname":"github.com","tags":["X Refsource MISC","REPORT","FIX","WEB"]},{"url":"https://github.com/pion/stun/releases/tag/v3.1.3","label":"github.com/pion/stun/releases/tag/v3.1.3","hostname":"github.com","tags":["X Refsource MISC","REPORT","WEB"]},{"url":"https://ubuntu.com/security/CVE-2026-54909","label":"ubuntu.com/security/CVE-2026-54909","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-54909","label":"www.cve.org/CVERecord?id=CVE-2026-54909","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-54909","label":"security-tracker.debian.org/tracker/CVE-2026-54909","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54909.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54909.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54909","label":"nvd.nist.gov/vuln/detail/CVE-2026-54909","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/pion/stun","label":"github.com/pion/stun","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/pion/stun/commit/cfe8f95bcae610be653f084e6e81743ed1bf4176","label":"github.com/pion/stun/commit/cfe8f95bcae610be653f084e6e81743ed1bf4176","hostname":"github.com","tags":["FIX"]},{"url":"https://github.com/pion/stun/releases/tag/v3.1.5","label":"github.com/pion/stun/releases/tag/v3.1.5","hostname":"github.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:21761-1","SUSE-SU-2026:23625-1"],"duplicates":[],"related":["CGA-Q3C3-3XH9-GW4X","OPENSUSE-SU-2026:21761-1","SUSE-SU-2026:23625-1"]},"timeline":[{"kind":"published","date":"2026-07-31T22:03:53.514Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-03T17:30:22.558Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":21,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T04:02:35.222Z","stale":false,"partial":false}}