Hi,

The following vulnerability was published for golang-github-pion-dtls.v2.

CVE-2026-54908[0]:
| Pion DTLS is a Go implementation of Datagram Transport Layer
| Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of
| Service via panic while parsing a crafted ECDHE_PSK
| ServerKeyExchange message. This issue has been fixed in version
| 3.1.4.

https://github.com/pion/dtls/security/advisories/GHSA-wg4g-wm44-ch5j
https://github.com/pion/dtls/pull/839


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-54908
https://www.cve.org/CVERecord?id=CVE-2026-54908

Please adjust the affected versions in the BTS as needed.