Go/github.com/DatanoiseTV/tinyice CVE-2026-45327: high 8.2, EPSS 0.62%

TinyIce: Missing authentication on WebRTC ingest endpoint allows unauthorized stream injection

Action: Upgrade github.com/DatanoiseTV/tinyice to 2.5.0 or later.

go get github.com/DatanoiseTV/tinyice@v2.5.0

Affected

Fixed versions

Sources

• osv: GHSA-p7c4-8x34-8j8f
• https://github.com/DatanoiseTV/tinyice/security/advisories/GHSA-p7c4-8x34-8j8f
• https://nvd.nist.gov/vuln/detail/CVE-2026-45327
• https://github.com/DatanoiseTV/tinyice/commit/8067d6b
• https://github.com/DatanoiseTV/tinyice
• https://github.com/DatanoiseTV/tinyice/releases/tag/v2.5.0

CVE-2026-45327 · published 2026-05-18T17:20:17Z · modified 2026-06-25T23:11:24.193178940Z · JSON