Security: versatica/mediasoup
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Missing bounds check in Packet::UpdateDependencyDescriptor() causes out-of-bounds write in RTP extension bufferGHSA-jhm4-v227-4375 published
Jul 24, 2026 by jmillanHigh -
Integer overflow in SCTP MISSING-MANDATORY-PARAMETER error cause causes out-of-bounds read (DoS)GHSA-p9cq-fqxc-987w published
Jul 24, 2026 by ibcHigh -
Non-Constant-Time Comparison in MAC/Credential Verification (SCTP State Cookie MAC & STUN MESSAGE-INTEGRITY)GHSA-xvjj-6cm4-ppgq published
Jul 24, 2026 by ibcLow -
SCTP state cookie lacks cryptographic authentication, enabling unauthorized association establishment (RFC 9260 violation)GHSA-p7x2-g5cq-fhmq published
Jun 15, 2026 by ibcModerate