Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Erlang OTP 27.3.4.17, 28.5.0.6, 29.0.6 Clear all filters
TI-2026-49189 CVE-2026-70409

eldap does not bound the port component of a referral URL before integer conversion

Priority LOW 29

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP eldap allows a malicious or compromised LDAP server to degrade availability by returning a referral URL whose port component is a very long r…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00577 Published 2026-09-01 Fixed in 27.3.4.17, 28.5.0.6 +4 CWE-1284
TI-2026-42572 CVE-2026-59696

uri_string does not bound the port component of a URI before integer conversion

Priority LOW 38

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to degrade availability by supplying a URI whose port component is a very long run of digits.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0071 Published 2026-09-01 Partial fix · 27.3.4.17, 28.5.0.6 +4 CWE-1284
TI-2026-49185 CVE-2026-70399

httpd does not enforce the documented default max_clients connection limit

Priority MEDIUM 45

Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by opening and holding open a large number of connections.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00927 Published 2026-09-01 Fixed in 27.3.4.17, 28.5.0.6 +4 CWE-770