Packages

ex_aws_sns

2.3.5

2.3.5 2.3.4 2.3.3 2.3.2 2.3.1 2.3.0 2.2.0 2.1.0 2.0.1 2.0.0

ExAws.SNS service package

HexDocs

Current section

1 Advisory

Jump to

Readme 10 Versions 1 Dependency 10 Dependants 1 Advisory Files Activity

EEF-CVE-2026-47074 CVE-2026-47074 GHSA-8jgf-23q5-x7xx

ex_aws_sns SigningCertURL not validated in verify_message/1

May 28, 2026

CVSS

8.7 / 10.0 High

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Affected Versions

>= 2.0.1 and < 2.3.5

References

https://cna.erlef.org/cves/CVE-2026-47074.html
https://github.com/benoitc/hackney/security/advisories/GHSA-jq4m-q6p2-8gwc
https://github.com/ex-aws/ex_aws_sns
https://github.com/ex-aws/ex_aws_sns/commit/1853d280b152d10384a1e21a22cf22152a60be48
https://github.com/ex-aws/ex_aws_sns/security/advisories/GHSA-8jgf-23q5-x7xx
https://nvd.nist.gov/vuln/detail/CVE-2026-47074
https://osv.dev/vulnerability/EEF-CVE-2026-47074

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions

this version

35 723

yesterday

2 789

last 7 days

11 916

all time

4 393 313

Last Updated

May 28, 2026

License

MIT

Build Tools

mix

Publisher

bernard

Owners

benwilson512
bernard
mbklein

Operator	Description	Example
name:	Match package name. Supports * wildcards and repo/package form	name:phx* or name:hexpm/phoenix
description:	Full-text search of package descriptions	description:auth
depends:	Packages depending on a given package. Supports repo:package form	depends:ecto or depends:hexpm:ecto
build_tool:	Filter by build tool	build_tool:mix
updated_after:	Packages updated after an ISO8601 datetime	updated_after:2025-01-01T00:00:00Z
extra:	Match custom metadata (key,value). Nested keys are separated by commas	extra:license,MIT

ex_aws_sns

Checksum

Dependency Config

Package Details

Links

Owners

Search filters