Browse Security Advisories
Security Advisories for https://github.com/erlang/otp from erlef Clear Filters
High
25 days ago
BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding
erlang/otp
High
25 days ago
Denial of service via exponential certificate policy tree growth in path validation
erlang/otp
Critical
25 days ago
TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication
erlang/otp
Medium
25 days ago
Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder
erlang/otp
Medium
25 days ago
Relative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypass
erlang/otp
High
25 days ago
TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain
erlang/otp
Medium
about 2 months ago
Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl
erlang/otp
High
about 2 months ago
DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions
erlang/otp
Medium
about 2 months ago
SSH SFTP server denial of service via extended channel data infinite loop
erlang/otp
High
about 2 months ago
TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension
erlang/otp
Medium
about 2 months ago
DTLS server cookie bypass during startup window due to empty initial cookie secret
erlang/otp
Low
about 2 months ago
SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root
erlang/otp
High
2 months ago
Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist
erlang/otp
Low
2 months ago
SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured
erlang/otp
Medium
2 months ago
ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks
erlang/otp
Medium
2 months ago
SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration
erlang/otp
High
2 months ago
Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crash
erlang/otp
High
3 months ago
nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification
erlang/otp
High
3 months ago
Non-CA certificate accepted as intermediate issuer in public_key path validation
erlang/otp
High
5 months ago
ScriptAlias CGI targets bypass directory auth in inets httpd (mod_auth vs mod_cgi path mismatch)
erlang/otp
High
5 months ago
OCSP designated-responder authorization bypass via missing signature verification
erlang/otp
Medium
5 months ago
Predictable DNS Transaction IDs Enable Cache Poisoning in Built-in Resolver
erlang/otp
Medium
11 months ago
Malicious Key Exchange Messages may Lead to Excessive Resource Consumption
erlang/otp
Filter by Severity
Filter by Source
CPAN Security Advisory Database
1,068
Erlang Ecosystem Foundation
183
GitHub Advisory Database
34,677
Filter by Ecosystem
Filter by Package
bandit
10
hackney
10
mint
8
mpp
7
ash
7
cowlib
7
mdex
6
html_sanitize_ex
6
livebook
5
tesla
5
mdex_native
4
grpc
4
guardian
4
plug
4
xml_builder
3
phoenix_storybook
3
gun
3
phoenix
3
boruta
3
postgrex
3
samly
2
oban_web
2
oidcc_plug
2
wisp
2
cowboy
2
phoenix_live_view
2
req
2
absinthe
2
membrane_mp4_plugin
1
ueberauth_apple
1
plug_cowboy
1
earmark
1
ex_aws_sns
1
phoenix
1
ash_authentication_phoenix
1
ash_authentication
1
swoosh
1
hpax
1
ymlr
1
decimal
1
absinthe_plug
1
oaskit
1
hex_core
1
absinthe_federation
1
Filter by Repository
https://github.com/erlang/otp
37
https://github.com/mtrudel/bandit
10
https://github.com/benoitc/hackney
10
https://github.com/elixir-mint/mint
8
https://github.com/ZenHive/mpp
7
https://github.com/ash-project/ash
7
https://github.com/rrrene/html_sanitize_ex
6
https://github.com/ninenines/cowlib
5
https://github.com/gleam-lang/gleam
5
https://github.com/livebook-dev/livebook
5
https://github.com/hexpm/hexpm
5
https://github.com/elixir-tesla/tesla
5
https://github.com/ueberauth/guardian
4
https://github.com/leandrocp/mdex_native
4
https://github.com/elixir-grpc/grpc
4
https://github.com/elixir-plug/plug
4
https://github.com/ninenines/cowboy
3
https://github.com/phoenixframework/phoenix
3
https://github.com/joshnuss/xml_builder
3
https://github.com/phenixdigital/phoenix_storybook
3
https://github.com/malach-it/boruta_auth
3
https://github.com/ninenines/gun
3
https://github.com/elixir-ecto/ecto
3
https://github.com/phoenixframework/phoenix_live_view
2
https://github.com/absinthe-graphql/absinthe
2
https://github.com/wojtekmach/req
2
https://github.com/oban-bg/oban_web
2
https://github.com/gleam-wisp/wisp
2
https://github.com/leandrocp/mdex
2
https://github.com/erlef/oidcc_plug
2
https://github.com/hexpm/hex
1
https://github.com/nerves-hub/nerves_hub_web
1
https://github.com/absinthe-graphql/absinthe_plug
1
https://github.com/ufirstgroup/ymlr
1
https://github.com/DivvyPayHQ/absinthe_federation
1
https://github.com/membraneframework/membrane_mp4_plugin
1
https://github.com/team-alembic/ash_authentication_phoenix
1
https://github.com/ueberauth/ueberauth_apple
1
https://github.com/ericmj/decimal
1
https://github.com/team-alembic/ash_authentication
1
https://github.com/Jump-App/esaml
1
https://github.com/hexpm/hex_core
1
https://github.com/ex-aws/ex_aws_sns
1
https://github.com/elixir-lang/elixir
1
https://github.com/elixir-mint/hpax
1
https://github.com/lud/oaskit
1
https://github.com/elixir-plug/plug_cowboy
1
https://github.com/erlef/cowlib
1
https://github.com/swoosh/swoosh
1