Packages

ssl_verify_fun

1.1.9

1.1.9 1.1.8 1.1.7 1.1.6 1.1.5 1.1.4 1.1.3 1.1.2 1.1.1 1.1.0 1.0.8

SSL verification library

HexDocs Report package

Current section

1 Advisory

Jump to

Documentation 11 Versions 0 Dependencies 23 Dependants 1 Advisory Files Activity

EEF-CVE-2026-117666 CVE-2026-117666 GHSA-7gw2-hphm-c5px

ssl_verify_fun: partial-label wildcard certificate matches hostnames across a label boundary

October 30, 2026

CVSS

9.1 / 10.0 Critical

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Affected Versions

>= 1.0.1 and < 1.1.8

References

https://cna.erlef.org/cves/CVE-2026-117666.html
https://github.com/deadtrickster/ssl_verify_fun.erl/commit/a49ca56923356c7a3981692b23c42ef32c2990e0
https://github.com/deadtrickster/ssl_verify_fun.erl/commit/ca34031299cd2e0c98794c0da4ba556b94e39aad
https://github.com/deadtrickster/ssl_verify_fun.erl/pull/33
https://github.com/deadtrickster/ssl_verify_fun.erl/security/advisories/GHSA-7gw2-hphm-c5px
https://hex.pm/packages/ssl_verify_fun

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions

this version

8 881

yesterday

29 704

last 7 days

450 251

all time

175 764 977

Last Updated

Oct 31, 2026

License

MIT

Build Tools

mix rebar3 make

Publisher

deadtrickster

Owners

deadtrickster

Operator	Description	Example
name:	Match package name. Supports * wildcards and repo/package form	name:phx* or name:hexpm/phoenix
description:	Full-text search of package descriptions	description:auth
depends:	Packages depending on a given package. Supports repo:package form	depends:ecto or depends:hexpm:ecto
build_tool:	Filter by build tool	build_tool:mix
updated_after:	Packages updated after an ISO8601 datetime	updated_after:2025-01-01T00:00:00Z
extra:	Match custom metadata (key,value). Nested keys are separated by commas	extra:license,MIT

ssl_verify_fun

Checksum

Dependency Config

Package Details

Links

Owners

Search filters