Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/erlang@1:23.2.6%2Bdfsg-1%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/erlang@1:23.2.6%2Bdfsg-1%2Bdeb11u3?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (4)
Vulnerability Summary Aliases
VCID-1283-nvxm-r7cw erlang: Erlang Excessive Use of System Resources CVE-2025-48038
VCID-c3vm-u9jn-83cs erlang: Erlang Excessive Use of System Resources CVE-2025-48039
VCID-jxzt-8wru-6yhk erlang: Erlang Exhaustion of File Handles CVE-2025-48041
VCID-vqnt-uyex-87fn Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2, zip:extract/1, zip:extract/2 unless the memory option is passed. This issue affects OTP from OTP 17.0 until OTP 28.0.1, OTP 27.3.4.1 and OTP 26.2.5.13, corresponding to stdlib from 2.0 until 7.0.1, 6.2.2.1 and 5.2.3.4. CVE-2025-4748

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T11:36:14.848119+00:00 Debian Importer Fixing VCID-vqnt-uyex-87fn https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T12:47:32.915659+00:00 Debian Importer Fixing VCID-jxzt-8wru-6yhk https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T12:47:32.751479+00:00 Debian Importer Fixing VCID-c3vm-u9jn-83cs https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T12:47:32.645742+00:00 Debian Importer Fixing VCID-1283-nvxm-r7cw https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:29:00.280662+00:00 Debian Importer Fixing VCID-vqnt-uyex-87fn https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:21:49.098104+00:00 Debian Importer Fixing VCID-jxzt-8wru-6yhk https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:21:48.991862+00:00 Debian Importer Fixing VCID-c3vm-u9jn-83cs https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:21:48.932503+00:00 Debian Importer Fixing VCID-1283-nvxm-r7cw https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:15:05.035579+00:00 Debian Importer Fixing VCID-vqnt-uyex-87fn https://security-tracker.debian.org/tracker/data/json 38.1.0