Skip to content

p2p/nat: patch secuirty vulnerabilities#34625

Open
KaloyanTanev wants to merge 1 commit intoethereum:masterfrom
KaloyanTanev:kalo/patch-security-vulns
Open

p2p/nat: patch secuirty vulnerabilities#34625
KaloyanTanev wants to merge 1 commit intoethereum:masterfrom
KaloyanTanev:kalo/patch-security-vulns

Conversation

@KaloyanTanev
Copy link
Copy Markdown

Fixes 2 go security vulnerabilities

  • GO-2026-4479, the replacement can be removed from go.mod once github.com/pion/stun/v3 release v3.1.2
  • GO-2026-4762, the replacement can be removed from go.mod once go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp release a patch with a fixed dependency

fixes #34621

@KaloyanTanev KaloyanTanev changed the title Patch secuirty vulnerabilities p2p/nat: patch secuirty vulnerabilities Mar 31, 2026
@fjl
Copy link
Copy Markdown
Contributor

fjl commented Apr 7, 2026

The replacements in go.mod are weird. If we want to depend on a specific version, we can just depend on that version.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Security vulnerability in pion/dtls dependency

2 participants