Known vulnerabilities in erlang-src

Vendor: openEuler
Software: erlang-src
Software CPE: cpe:2.3:o:openeuler:erlang-src:*:*:*:*:*:openeuler:*:*
Total vulnerabilities: 29
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting erlang-src erlang-src is affected by 29 known vulnerabilities: 6 high, 13 medium, 10 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146827 - Improper Handling of Exceptional Conditions
CVE-2026-42792
CWE-755 Medium
No
No
25.3.2.6-19 02.09.2026 SB20260902104
SB20260902107
SB20260902108
and 4 more
#VU146825 - Signed to Unsigned Conversion Error
CVE-2026-55737
CWE-195 Low
No
No
25.3.2.6-19 02.09.2026 SB20260902104
SB20260902107
SB20260902108
and 4 more
#VU146824 - Selection of Less-Secure Algorithm During Negotiat
CVE-2026-55953
CWE-757 High
No
No
25.3.2.6-19 02.09.2026 SB20260902104
SB20260902105
SB20260902106
and 9 more
#VU146823 - Out-of-bounds write
CVE-2026-59250
CWE-787 High
No
No
25.3.2.6-19 02.09.2026 SB20260902104
SB20260902107
SB20260902108
and 4 more
#VU146822 - Uncontrolled Recursion
CVE-2026-58227
CWE-674 Medium
No
No
25.3.2.6-19 02.09.2026 SB20260902104
SB20260902107
SB20260902108
and 5 more
#VU136828 - Observable Response Discrepancy
CVE-2026-53422
CWE-204 Low
No
No
25.3.2.6-18 02.07.2026 SB2026070297
SB2026071924
SB2026071925
and 5 more
#VU136827 - Use of Default Cryptographic Key
CVE-2026-54887
CWE-1394 Low
No
No
25.3.2.6-18 02.07.2026 SB2026070297
SB2026071924
SB2026071925
and 5 more
#VU136826 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-54886
CWE-835 Low
No
No
25.3.2.6-18 02.07.2026 SB2026070297
SB2026071054
SB2026071055
and 7 more
#VU136825 - Improper Enforcement of Message Integrity During Transmission in a Communication Channel
CVE-2026-54891
CWE-924 Medium
No
No
25.3.2.6-18 02.07.2026 SB2026070297
SB2026071054
SB2026071055
and 7 more
#VU136824 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-55950
CWE-367 Medium
No
No
25.3.2.6-18 02.07.2026 SB2026070297
SB2026071924
SB2026071926
and 3 more
#VU136823 - Improper Validation of Specified Quantity in Input
CVE-2026-55952
CWE-1284 Medium
No
No
25.3.2.6-18 02.07.2026 SB2026070297
SB2026071054
SB2026071055
and 7 more
#VU136821 - Exposure of sensitive information to an unauthorized actor
CVE-2026-48855
CWE-200 Low
No
No
25.3.2.6-18 02.07.2026 SB2026070296
SB2026070301
SB2026070302
and 7 more
#VU136820 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-48856
CWE-601 Medium
No
No
25.3.2.6-18 02.07.2026 SB2026070296
SB2026071924
SB2026071925
and 5 more
#VU136818 - Server-Side Request Forgery (SSRF)
CVE-2026-48858
CWE-918 Low
No
No
25.3.2.6-18 02.07.2026 SB2026070296
SB2026071054
SB2026071055
and 7 more
#VU136817 - Stack-based buffer overflow
CVE-2026-49759
CWE-121 Medium
No
No
25.3.2.6-18 02.07.2026 SB2026070296
SB2026071054
SB2026071055
and 7 more
#VU136816 - Stack-based buffer overflow
CVE-2026-49760
CWE-121 Medium
No
No
25.3.2.6-18 02.07.2026 SB2026070296
SB2026071924
SB2026071925
and 5 more
#VU126652 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-32147
CWE-22 Low
No
No
25.3.2.6-16, 25.3.2.6-17, 25.3.2.6-18 21.04.2026 SB2026042143
SB2026051961
SB2026070964
and 5 more
#VU125777 - Incorrect Authorization
CVE-2026-28808
CWE-863 High
No
No
25.3.2.6-15 10.04.2026 SB2026041031
SB2026041046
SB2026041047
and 6 more
#VU125772 - Relative Path Traversal
CVE-2026-21620
CWE-23 Low
No
No
25.3.2.6-15, 25.3.2.6-17 10.04.2026 SB2026041021
SB2026041023
SB2026041024
and 6 more
#VU117393 - Resource exhaustion
CVE-2025-48041
CWE-400 Medium
No
No
25.3.2.6-19 20.10.2025 SB2025102052
SB2025102180
SB2025102745
and 5 more


Showing elements 1 - 20 out of 29