CVE catalog

CVE-2026-48855

Exposure of Sensitive Information to an Unauthorized…

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Erlang OTP ssh (ssh_sftpd module) allows File Discovery. The SSH_FXP_READLINK handler in ssh_sftpd sends the raw result of file:read_link/2 to the client without calling chroot_filename/2 to strip the backend root prefix. An authenticated SFTP client can create a symlink inside the chroot pointing to /; ssh_sftpd resolves the target to the absolute backend root and stores it on disk. Reading the symlink back via SSH_FXP_READLINK returns that absolute path, for example /data/sftp, instead of the chrooted value /. The information disclosed is the absolute filesystem path of the SFTP root directory and of any symlink targets within it. No file contents, credentials, or access to paths outside the root directory are obtainable through this issue alone. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. This issue affects OTP from OTP 17.0 before OTP 27.3.4.13, OTP 28.5.0.2, and OTP 29.0.2, corresponding to ssh from 3.0.1 before 5.2.11.8, 5.5.2.1, and 6.0.1. Whether OTP before OTP 17.0, corresponding to ssh before 3.0.1, is affected is unknown.

Severity: Medium · CVSS 4.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Published: Jun 10, 2026, 2:35:49 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.30% · Oct 27, 2026

Projects and upstream resources

[erlang][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Version impact has not been established. The original provider fields are retained below.

Provider details and historical evidence

Original provider fields

{
  "package_releases": [
    {
      "name": "erlang",
      "status": "fixed",
      "release": "sid",
      "version": "1:29.1.2+dfsg-1"
    },
    {
      "name": "erlang",
      "status": "fixed",
      "release": "forky",
      "version": "1:29.1.1+dfsg-1"
    },
    {
      "name": "erlang",
      "status": "fixed",
      "release": "trixie",
      "version": "1:27.3.4.1+dfsg-1+deb13u3"
    },
    {
      "name": "erlang",
      "status": "fixed",
      "release": "trixie-security",
      "version": "1:27.3.4.1+dfsg-1+deb13u4"
    },
    {
      "name": "erlang",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "1:25.2.3+dfsg-1+deb12u4"
    },
    {
      "name": "erlang",
      "status": "vulnerable",
      "release": "bookworm-security",
      "version": "1:25.2.3+dfsg-1+deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": 1139727,
      "name": "erlang",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "1:29.0.2+dfsg-1"
    },
    {
      "bug": 1139727,
      "name": "erlang",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "1:29.0.2+dfsg-1"
    },
    {
      "bug": 1139727,
      "name": "erlang",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "1:27.3.4.1+dfsg-1+deb13u3"
    },
    {
      "bug": 1139727,
      "name": "erlang",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": ""
    }
  ],
  "distribution_packages": [
    {
      "name": "erlang",
      "ecosystem": "cpe",
      "fixed_version": "not yet fixed"
    },
    {
      "name": "erlang\\/otp",
      "ecosystem": "cpe",
      "fixed_version": "27.3.4.13"
    },
    {
      "name": "erlang\\/otp",
      "ecosystem": "cpe",
      "fixed_version": "28.5.0.2"
    },
    {
      "name": "erlang\\/otp",
      "ecosystem": "cpe",
      "fixed_version": "29.0.2"
    },
    {
      "name": "erlang\\/ssh",
      "ecosystem": "cpe",
      "fixed_version": "5.2.11.8"
    },
    {
      "name": "erlang\\/ssh",
      "ecosystem": "cpe",
      "fixed_version": "5.5.2.1"
    },
    {
      "name": "erlang\\/ssh",
      "ecosystem": "cpe",
      "fixed_version": "6.0.1"
    },
    {
      "name": "erlang\\/otp",
      "ranges": [
        {
          "fixed": "29.0.2",
          "introduced": "29.0",
          "last_affected": "",
          "start_excluding": ""
        }
      ],
      "ecosystem": "cpe",
      "fixed_version": "29.0.2",
      "provider_record_id": "NVD-CVE-2026-48855"
    },
    {
      "name": "erlang\\/ssh",
      "ranges": [
        {
          "fixed": "6.0.1",
          "introduced": "6.0",
          "last_affected": "",
          "start_excluding": ""
        }
      ],
      "ecosystem": "cpe",
      "fixed_version": "6.0.1",
      "provider_record_id": "NVD-CVE-2026-48855"
    },
    {
      "name": "erlang",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:22.2.7+dfsg-1ubuntu0.5+esm3"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "1:22.0.7+dfsg-1build1",
        "1:22.2+dfsg-1",
        "1:22.2.1+dfsg-1",
        "1:22.2.2+dfsg-1",
        "1:22.2.3+dfsg-1",
        "1:22.2.3+dfsg-2",
        "1:22.2.4+dfsg-1",
        "1:22.2.7+dfsg-1",
        "1:22.2.7+dfsg-1ubuntu0.2",
        "1:22.2.7+dfsg-1ubuntu0.3",
        "1:22.2.7+dfsg-1ubuntu0.4",
        "1:22.2.7+dfsg-1ubuntu0.5",
        "1:22.2.7+dfsg-1ubuntu0.5+esm1",
        "1:22.2.7+dfsg-1ubuntu0.5+esm2"
      ],
      "ecosystem": "deb",
      "fixed_version": "1:22.2.7+dfsg-1ubuntu0.5+esm3",
      "provider_record_id": "UBUNTU-CVE-2026-48855"
    },
    {
      "name": "erlang",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:24.2.1+dfsg-1ubuntu0.8"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "1:23.2.6+dfsg-1build1",
        "1:24.1.1+dfsg-1",
        "1:24.1.4+dfsg-1",
        "1:24.1.5+dfsg-1",
        "1:24.1.5+dfsg-1ubuntu1",
        "1:24.2+dfsg-1",
        "1:24.2.1+dfsg-1",
        "1:24.2.1+dfsg-1ubuntu0.1",
        "1:24.2.1+dfsg-1ubuntu0.2",
        "1:24.2.1+dfsg-1ubuntu0.3",
        "1:24.2.1+dfsg-1ubuntu0.4",
        "1:24.2.1+dfsg-1ubuntu0.5",
        "1:24.2.1+dfsg-1ubuntu0.6",
        "1:24.2.1+dfsg-1ubuntu0.7"
      ],
      "ecosystem": "deb",
      "fixed_version": "1:24.2.1+dfsg-1ubuntu0.8",
      "provider_record_id": "UBUNTU-CVE-2026-48855"
    },
    {
      "name": "erlang",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:25.3.2.8+dfsg-1ubuntu4.8"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "1:25.2.3+dfsg-1",
        "1:25.3.2.8+dfsg-1",
        "1:25.3.2.8+dfsg-1ubuntu1",
        "1:25.3.2.8+dfsg-1ubuntu3",
        "1:25.3.2.8+dfsg-1ubuntu4",
        "1:25.3.2.8+dfsg-1ubuntu4.1",
        "1:25.3.2.8+dfsg-1ubuntu4.2",
        "1:25.3.2.8+dfsg-1ubuntu4.3",
        "1:25.3.2.8+dfsg-1ubuntu4.4",
        "1:25.3.2.8+dfsg-1ubuntu4.5",
        "1:25.3.2.8+dfsg-1ubuntu4.6",
        "1:25.3.2.8+dfsg-1ubuntu4.7"
      ],
      "ecosystem": "deb",
      "fixed_version": "1:25.3.2.8+dfsg-1ubuntu4.8",
      "provider_record_id": "UBUNTU-CVE-2026-48855"
    },
    {
      "name": "erlang",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "25.10",
      "versions": [
        "1:27.3+dfsg-1ubuntu1",
        "1:27.3+dfsg-1ubuntu1.1",
        "1:27.3.4.1+dfsg-1",
        "1:27.3.4.1+dfsg-1build1",
        "1:27.3.4.1+dfsg-1ubuntu0.1"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2026-48855"
    },
    {
      "name": "erlang",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:27.3.4.6+dfsg-1ubuntu0.2"
            }
          ]
        }
      ],
      "release": "26.04",
      "versions": [
        "1:27.3.4.1+dfsg-1build1",
        "1:27.3.4.3+dfsg-1",
        "1:27.3.4.4+dfsg-1",
        "1:27.3.4.6+dfsg-1",
        "1:27.3.4.6+dfsg-1ubuntu0.1"
      ],
      "ecosystem": "deb",
      "fixed_version": "1:27.3.4.6+dfsg-1ubuntu0.2",
      "provider_record_id": "UBUNTU-CVE-2026-48855"
    }
  ]
}

[Debian bug #1139727]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[erlang]Unknown
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-asn1]Unknown
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-base]Unknown
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-common-test]Unknown
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-crypto]Unknown
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-debugger]Unknown
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-dev]Unknown
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-dialyzer]Unknown
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-diameter]Unknown
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-doc]Unknown
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-edoc]Unknown
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-eldap]Unknown
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-erl-docgen]Unknown
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-et]Unknown
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-eunit]Unknown
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-examples]Unknown
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-ftp]Unknown
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-inets]Unknown
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-jinterface]Unknown
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-manpages]Unknown
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

Next results

Observed: Oct 27, 2026, 7:15:09 AM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]