CVE-2022-29190: Pion Dtls

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, an attacker can send packets that sends Pion DTLS into an infinite loop when processing. Version 2.1.4 contains a patch for this issue. There are currently no known workarounds available.

Affected products

• Pion Dtls: before 2.1.4 (fixed in 2.1.4)

Published 2022-05-21. Last modified 2026-06-17.