go package report

Is github.com/pion/interceptor safe?

1 known vulnerability, worst severity HIGH.

cvss

7.5

how bad it is if exploited, out of 10

epss

0.50%

chance of exploitation in the next 30 days

xyz score

not scored

CyberXYZ composite, out of 10

fig. 01 — GHSA-f26w-gh5m-qq77, the advisory selected below

// advisories

GHSA-f26w-gh5m-qq77

HIGHCVE-2025-49140

Pion Interceptor versions v0.1.36 through v0.1.38 contain a bug in a RTP packet factory that can be exploited to trigger a panic with Pion based SFU via crafted RTP packets, This only affect users that use pion/interceptor.

Affected: >=0.1.36, <0.1.39
Fixed in: 0.1.39
Weakness: CWE-770
Published: 2025-06-09
Source: github

GHSA NVD MITRE

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so go packages are not covered.

Checked 2026-09-22 at 01:35 UTC. The most recent advisory here was published 2025-06-09. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is github.com/pion/interceptor safe? go package security report | CyberXYZ