CVE-2026-45327

Go/github.com/DatanoiseTV/tinyice CVE-2026-45327: high 8.2

TinyIce: Missing authentication on WebRTC ingest endpoint allows unauthorized stream injection

Action: Upgrade github.com/DatanoiseTV/tinyice to 2.5.0 or later.

go get github.com/DatanoiseTV/tinyice@v2.5.0

Affected

Fixed versions

Sources

• osv: GHSA-p7c4-8x34-8j8f
• https://github.com/DatanoiseTV/tinyice/security/advisories/GHSA-p7c4-8x34-8j8f
• https://nvd.nist.gov/vuln/detail/CVE-2026-45327
• https://github.com/DatanoiseTV/tinyice/commit/8067d6b
• https://github.com/DatanoiseTV/tinyice
• https://github.com/DatanoiseTV/tinyice/releases/tag/v2.5.0

CVE-2026-45327 · published 2026-05-18T17:20:17Z · modified 2026-06-25T23:11:24.193178940Z · JSON

Go/github.com/DatanoiseTV/tinyice CVE-2026-45327: unknown

TinyIce: Missing authentication on WebRTC ingest endpoint allows unauthorized stream injection in github.com/DatanoiseTV/tinyice

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5534
• https://github.com/DatanoiseTV/tinyice/security/advisories/GHSA-p7c4-8x34-8j8f
• https://nvd.nist.gov/vuln/detail/CVE-2026-45327
• https://github.com/DatanoiseTV/tinyice/commit/8067d6b
• https://github.com/DatanoiseTV/tinyice/releases/tag/v2.5.0

CVE-2026-45327 · published 2026-06-25T22:34:34Z · modified 2026-06-25T23:01:20.961179650Z · JSON