{"meta":{"links":{"GitHub":"https://github.com/elixir-webrtc/ex_webrtc"},"description":"Implementation of the W3C WebRTC API","licenses":["Apache-2.0"],"maintainers":[]},"name":"ex_webrtc","url":"https://hex.pm/api/packages/ex_webrtc","owners":[{"url":"https://hex.pm/api/users/elixirwebrtc","username":"elixirwebrtc"}],"inserted_at":"2024-02-07T14:07:16.343351Z","updated_at":"2026-05-04T12:15:20.236178Z","repository":"hexpm","releases":[{"version":"0.16.1","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.16.1","has_docs":true,"inserted_at":"2026-05-04T10:44:02.740608Z"},{"version":"0.16.0","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.16.0","has_docs":true,"inserted_at":"2026-02-24T15:10:49.369522Z"},{"version":"0.15.1","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.15.1","has_docs":true,"inserted_at":"2026-05-04T10:59:01.950001Z"},{"version":"0.15.0","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.15.0","has_docs":true,"inserted_at":"2025-07-16T09:27:42.800572Z"},{"version":"0.14.0","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.14.0","has_docs":true,"inserted_at":"2025-05-29T10:06:06.024806Z"},{"version":"0.13.0","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.13.0","has_docs":true,"inserted_at":"2025-04-18T17:03:23.811370Z"},{"version":"0.12.0","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.12.0","has_docs":true,"inserted_at":"2025-03-19T14:48:12.461573Z"},{"version":"0.11.0","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.11.0","has_docs":true,"inserted_at":"2025-03-18T14:51:56.667398Z"},{"version":"0.10.0","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.10.0","has_docs":true,"inserted_at":"2025-03-06T10:53:31.436560Z"},{"version":"0.9.0","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.9.0","has_docs":true,"inserted_at":"2025-03-06T09:39:51.819416Z"},{"version":"0.8.1","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.8.1","has_docs":true,"inserted_at":"2025-02-12T11:01:17.572491Z"},{"version":"0.8.0","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.8.0","has_docs":true,"inserted_at":"2025-02-07T17:02:36.614602Z"},{"version":"0.7.0","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.7.0","has_docs":true,"inserted_at":"2024-12-02T16:29:18.955134Z"},{"version":"0.6.3","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.6.3","has_docs":true,"inserted_at":"2024-11-18T11:54:35.969912Z"},{"version":"0.6.2","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.6.2","has_docs":true,"inserted_at":"2024-10-21T07:48:03.456196Z"},{"version":"0.6.1","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.6.1","has_docs":true,"inserted_at":"2024-10-10T11:49:26.338875Z"},{"version":"0.6.0","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.6.0","has_docs":true,"inserted_at":"2024-10-08T10:01:31.659675Z"},{"version":"0.5.1","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.5.1","has_docs":true,"inserted_at":"2024-10-21T07:38:28.594244Z"},{"version":"0.5.0","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.5.0","has_docs":true,"inserted_at":"2024-09-10T16:57:34.698588Z"},{"version":"0.4.1","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.4.1","has_docs":true,"inserted_at":"2024-08-24T17:30:20.825276Z"},{"version":"0.4.0","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.4.0","has_docs":true,"inserted_at":"2024-08-09T13:17:50.964815Z"},{"version":"0.3.0","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.3.0","has_docs":true,"inserted_at":"2024-06-28T07:29:17.951963Z"},{"version":"0.2.0","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.2.0","has_docs":true,"inserted_at":"2024-05-14T10:08:20.963845Z"},{"version":"0.1.0","url":"https://hex.pm/api/packages/ex_webrtc/releases/0.1.0","has_docs":true,"inserted_at":"2024-02-07T14:07:16.355340Z"}],"html_url":"https://hex.pm/packages/ex_webrtc","downloads":{"all":65113,"day":254,"recent":16654,"week":1509},"security_advisories":[{"id":"GHSA-qwfw-ggxw-577c","aliases":["CVE-2026-44700"],"references":[{"type":"WEB","url":"https://github.com/elixir-webrtc/ex_webrtc/security/advisories/GHSA-qwfw-ggxw-577c"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44700"},{"type":"WEB","url":"https://github.com/elixir-webrtc/ex_webrtc/issues/249"},{"type":"WEB","url":"https://github.com/elixir-webrtc/ex_webrtc/pull/250"},{"type":"WEB","url":"https://github.com/elixir-webrtc/ex_webrtc/commit/658c63221a869fb12bb9989599c3688751b0531b"},{"type":"PACKAGE","url":"https://github.com/elixir-webrtc/ex_webrtc"},{"type":"WEB","url":"https://github.com/elixir-webrtc/ex_webrtc/releases/tag/v0.15.1"},{"type":"WEB","url":"https://github.com/elixir-webrtc/ex_webrtc/releases/tag/v0.16.1"}],"summary":"ex_webrtc client-role handshake is missing DTLS peer fingerprint validation","html_url":"https://osv.dev/vulnerability/GHSA-qwfw-ggxw-577c","api_url":"https://api.osv.dev/v1/vulns/GHSA-qwfw-ggxw-577c","cvss_score":8.7,"cvss_rating":"high","cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","modified_at":"2026-05-16T00:10:10Z","published_at":"2026-05-08T17:08:18Z","withdrawn_at":null,"affected":["< 0.15.1",">= 0.16.0 and < 0.16.1"]}],"latest_version":"0.16.1","docs_html_url":"https://hexdocs.pm/ex_webrtc/","retirements":{"0.15.0":{"message":"Missing DTLS fingerprint check in client-role handshake; weakens auth. Upgrade to 0.15.1/0.16.1.","reason":"security"},"0.16.0":{"message":"Missing DTLS fingerprint check in client-role handshake; weakens auth. Upgrade to 0.15.1/0.16.1.","reason":"security"}},"configs":{"erlang.mk":"dep_ex_webrtc = hex 0.16.1","mix.exs":"{:ex_webrtc, \"~> 0.16.1\"}","rebar.config":"{ex_webrtc, \"0.16.1\"}"},"latest_stable_version":"0.16.1"}