Skip to content
Threat Feed
Subscribe

Tag

Erlang

4 briefs RSS
critical advisory

Erlang/OTP: Multiple Vulnerabilities

Multiple vulnerabilities in Erlang/OTP allow a remote, anonymous attacker to perform a Denial of Service attack, execute arbitrary code, bypass security measures, and manipulate or disclose data.

Erlang/OTP vulnerability erlang otp rce dos data-exfiltration defense-evasion
2t
medium advisory

Tesla HTTP Client Library Vulnerable to Atom Exhaustion Leading to Denial of Service (CVE-2026-48597)

A high-severity denial-of-service vulnerability (CVE-2026-48597) in the `Tesla.Adapter.Mint` component of the Elixir Tesla HTTP client library, affecting versions 1.3.0 through 1.18.2, allows an unauthenticated attacker to crash the underlying BEAM VM by supplying untrusted URL schemes, leading to atom exhaustion.

tesla denial-of-service elixir erlang vulnerability web-application
1t 1c
medium advisory

Erlang/OTP Information Disclosure Vulnerability

A remote, authenticated attacker can exploit an unspecified vulnerability in Erlang/OTP to disclose sensitive information.

Erlang/OTP information-disclosure vulnerability erlang
2r 1t
high advisory

Bandit WebSocket permessage-deflate unbounded inflate leads to DoS

Bandit versions 0.5.8 before 1.11.0 are vulnerable to denial of service when permessage-deflate is enabled, allowing an unauthenticated client to exhaust the BEAM's memory with a single, small, compressed WebSocket frame due to unbounded decompression.

bandit websocket denial-of-service erlang
3r 6t