Known vulnerabilities in erlang-src

Vendor: openEuler
Software: erlang-src
Software CPE: cpe:2.3:o:openeuler:erlang-src:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 23
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting erlang-src erlang-src is affected by 23 known vulnerabilities: 4 high, 10 medium, 9 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136828 - Observable Response Discrepancy
CVE-2026-53422		 CWE-204 Low
No
No
 25.3.2.6-18 02.07.2026 SB2026070297
SB2026071924
SB2026071925
and 2 more
#VU136827 - Use of Default Cryptographic Key
CVE-2026-54887		 CWE-1394 Low
No
No
 25.3.2.6-18 02.07.2026 SB2026070297
SB2026071924
SB2026071925
and 2 more
#VU136826 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-54886		 CWE-835 Low
No
No
 25.3.2.6-18 02.07.2026 SB2026070297
SB2026071054
SB2026071055
and 4 more
#VU136825 - Improper Enforcement of Message Integrity During Transmission in a Communication Channel
CVE-2026-54891		 CWE-924 Medium
No
No
 25.3.2.6-18 02.07.2026 SB2026070297
SB2026071054
SB2026071055
and 4 more
#VU136824 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-55950		 CWE-367 Medium
No
No
 25.3.2.6-18 02.07.2026 SB2026070297
SB2026071924
SB2026071926
and 1 more
#VU136823 - Improper Validation of Specified Quantity in Input
CVE-2026-55952		 CWE-1284 Medium
No
No
 25.3.2.6-18 02.07.2026 SB2026070297
SB2026071054
SB2026071055
and 4 more
#VU136821 - Exposure of sensitive information to an unauthorized actor
CVE-2026-48855		 CWE-200 Low
No
No
 25.3.2.6-18 02.07.2026 SB2026070296
SB2026070301
SB2026070302
and 4 more
#VU136820 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-48856		 CWE-601 Medium
No
No
 25.3.2.6-18 02.07.2026 SB2026070296
SB2026071924
SB2026071925
and 2 more
#VU136818 - Server-Side Request Forgery (SSRF)
CVE-2026-48858		 CWE-918 Low
No
No
 25.3.2.6-18 02.07.2026 SB2026070296
SB2026071054
SB2026071055
and 4 more
#VU136817 - Stack-based buffer overflow
CVE-2026-49759		 CWE-121 Medium
No
No
 25.3.2.6-18 02.07.2026 SB2026070296
SB2026071054
SB2026071055
and 4 more
#VU136816 - Stack-based buffer overflow
CVE-2026-49760		 CWE-121 Medium
No
No
 25.3.2.6-18 02.07.2026 SB2026070296
SB2026071924
SB2026071925
and 2 more
#VU126652 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-32147		 CWE-22 Low
No
No
 25.3.2.6-16, 25.3.2.6-17, 25.3.2.6-18 21.04.2026 SB2026042143
SB2026051961
SB2026070964
and 3 more
#VU125777 - Incorrect Authorization
CVE-2026-28808		 CWE-863 High
No
No
 25.3.2.6-15 10.04.2026 SB2026041031
SB2026041046
SB2026041047
and 5 more
#VU125775 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-23941		 CWE-444 High
No
No
 25.3.2.6-13 10.04.2026 SB2026041022
SB2026041027
SB2026041028
and 6 more
#VU125774 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-23942		 CWE-22 Low
No
No
 25.3.2.6-13 10.04.2026 SB2026041022
SB2026041027
SB2026041028
and 6 more
#VU125773 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-23943		 CWE-409 Medium
No
No
 25.3.2.6-13 10.04.2026 SB2026041022
SB2026041027
SB2026041028
and 5 more
#VU125772 - Relative Path Traversal
CVE-2026-21620		 CWE-23 Low
No
No
 25.3.2.6-15, 25.3.2.6-17 10.04.2026 SB2026041021
SB2026041023
SB2026041024
and 6 more
#VU117392 - Uncontrolled Recursion
CVE-2025-48040		 CWE-674 Medium
No
No
 25.3.2.6-11 20.10.2025 SB2025102052
SB2025102180
SB20260105126
and 5 more
#VU117391 - Resource exhaustion
CVE-2025-48039		 CWE-400 Medium
No
No
 25.3.2.6-11 20.10.2025 SB2025102052
SB2025102180
SB20260105126
and 7 more
#VU117390 - Resource exhaustion
CVE-2025-48038		 CWE-400 Medium
No
No
 25.3.2.6-10 20.10.2025 SB2025102052
SB2025102054
SB2025102055
and 6 more


Showing elements 1 - 20 out of 23