[Netcode] Urgent: Facepunch Transport Version Vulnerability
Under Audit
Unity 2020.3.x - Unity 6.1.x
Published 23 days ago
A community-maintained com.community.netcode.transport.facepunch package uses an outdated Steamworks.Facepunch version, raising concerns about compatibility and security with newer official releases.
The com.community.netcode.transport.facepunch community package incorporates Steamworks.Facepunch version 2.3.2, which was released in 2020. This raises concerns as the official Steamworks.Facepunch library has progressed to newer versions, specifically 2.4.1 and 2.5.0. The continued use of a significantly older version within a community package prompts questions regarding its stability, security, and compatibility with current development practices and official Steamworks.Facepunch functionalities.
- Investigate if the community
com.community.netcode.transport.facepunchpackage can be updated or forked to support newer Steamworks.Facepunch versions. - Consider migrating to an officially supported or more actively maintained networking solution if the current package presents significant risks.
- Check the official documentation or community forums for the
com.community.netcode.transport.facepunchpackage for any planned updates or known issues regarding Steamworks.Facepunch versions.
Editor's Note:
Related Posts Haven't quite found a solution to your problem? We think these posts might help you.
Content inspired by a Unity discussion post.