Erlang

Records81All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high39CVSS 7.0–8.9

Exploited now

Erlang records in CISA KEV

TI-2025-23504 Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2025-06-09

Components

Products in the NVD configurations · select one to filter the records

Erlang/otp 41 records CRITICAL Erlang/ssl 8 records MEDIUM Erlang/ssh 7 records LOW Erlang/inets 4 records MEDIUM Erts 4 records MEDIUM Rebar3 3 records MEDIUM Erlang/public Key 2 records MEDIUM Crypto 1 record MEDIUM

Records

3 records in Rebar3 · all components

TI-2020-10791 CVE-2020-13802 · GHSA-fj2j-8cg9-vrj8

Rebar3 versions 3.0.0-beta.3 to 3.13.2 are vulnerable to OS command injection via URL…

MEDIUM 52

Rebar3 versions 3.0.0-beta.3 to 3.13.2 are vulnerable to OS command injection via URL parameter of dependency specification.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0675 Published 2020-09-02 No fix listed CWE-78

TI-2019-15831 CVE-2019-1000014 · GHSA-gxw9-83q5-mxj8

Erlang/OTP Rebar3 version 3.7.0 through 3.7.5 contains a Signing oracle vulnerability in…

MEDIUM 42

Erlang/OTP Rebar3 version 3.7.0 through 3.7.5 contains a Signing oracle vulnerability in Package registry verification that can result in Package modifications not detected, allowing code execution.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0179 Published 2019-02-04 No fix listed

TI-2026-17411 CVE-2026-21619 · GHSA-hx9w-f2w9-9g96

Unsafe Deserialization of Erlang Terms in hex_core

LOW 12

Uncontrolled Resource Consumption, Deserialization of Untrusted Data vulnerability in hexpm hex_core (hex_api modules), hexpm hex (mix_hex_api modules), erlang rebar3 (r3_hex_api modules) allows Object Injection, Excessi…

CVSS 4.0LOW 2.0 Network Low privileges User interaction EPSS 0.00638 Published 2026-02-27 Fixed in 0.12.1, 2.3.2 +1 CWE-400

Open these records in search →

Critical	6
High	39
Medium	30
Low	6
No CVSS	0