coturn/coturn

License

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the https://github.com|coturn/coturn package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Denial of Service (DoS)	[,4.16.0)
L Insufficient Verification of Data Authenticity	[,4.15.0)
H Denial of Service (DoS)	[,4.17.0)
H Improper Update of Reference Count	[,4.17.0)
M Integer Overflow or Wraparound	[,4.15.0)
M Incorrect Authorization	[,4.16.0)
H Use of Externally-Controlled Format String	[,4.13.0)
M Access Control Bypass	[,4.13.1)
H Allocation of Resources Without Limits or Throttling	[,4.16.0)
H Authorization Bypass Through User-Controlled Key	[,4.15.0)
H Out-of-bounds Read	[4.5.2,4.15.0)
M Directory Traversal	[,4.13.0)
H SQL Injection	[,4.12.0)
M Server-side Request Forgery (SSRF)	[,4.13.0)
C Buffer Overflow	[,4.10.0)
M Cross-site Scripting (XSS)	[,4.11.0)
H Incorrect Type Conversion or Cast	[,4.10.0)
M Unintended Proxy or Intermediary ('Confused Deputy')	[,4.9.0)
H Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	[4.6.3,4.8.0)
C Out-of-bounds Write	[,4.5.1.2)
C Use of Hard-coded Credentials	[,4.5.0.9)
H CVE-2018-4058	[,4.5.0.9)
H Incorrect Calculation	[,4.5.2)
H NULL Pointer Dereference	[,4.5.1.2)
C SQL Injection	[,4.5.0.9)
H Improper Initialization	[,4.5.1.3)