mediasoup: SCTP state cookie lacks cryptographic authentication, enabling unauthorized association establishment (RFC 9260 violation)
Moderate severity
GitHub Reviewed
Published
Jun 15, 2026
in
versatica/mediasoup
•
Updated Aug 25, 2026
Give feedback on Dependabot alerts