[ Vendor · 8 CVEs ]
erlang
CVEs affecting erlang published in the last 30 days, plus any erlang CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-96596 | 14 Oct 2026 | CVSS 5.9 | erlang rebar3Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module), hexpm hex_core (hex_erl_tar module)… | |
| CVE-2026-96596 | 14 Oct 2026 | CVSS 5.9 | erlang rebar3Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module), hexpm hex_core (hex_erl_tar module)… | |
| CVE-2026-94200 | 14 Oct 2026 | CVSS 8.2 | Erlang OTPImproper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_store… | |
| CVE-2026-105236 | 14 Oct 2026 | CVSS 6.3 | Erlang OTPImproper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI… | |
| CVE-2026-105274 | 12 Oct 2026 | CVSS 2.1 | erlang rebar3Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex_core allows an untrusted repository mirror, or a server… | |
| CVE-2026-103060 | 12 Oct 2026 | CVSS 7.5 | erlang rebar3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in erlang rebar3 allows a malicious package publisher to… | |
| CVE-2025-32433 | 16 Apr 2025 | CVSS 10.0 | Erlang Erlang/OTP SSH Server Missing Authentication for Critical FunctionErlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server… | ExploitedFix |
| CVE-2025-32433 | 16 Apr 2025 | CVSS 10.0 | Erlang Erlang/OTP SSH Server Missing Authentication for Critical FunctionErlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server… | ExploitedFix |