Package: rebar3 (3.19.0-1) Erlang tool to create, develop, and release Erlang libraries and applications Other Packages Related to rebar3: [erlang ]
Concurrent, real-time, distributed functional language
[git ]
fast, scalable, distributed revision control system
Package file paths (0) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
No package-associated file paths were observed for the displayed build metadata.
Field source: Debian 12 (Bookworm) main amd64
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Known vulnerabilities Matching against OpenFactory catalog package versions is in progress.
CVE Severity Version impact [CVE-2026-105274 ] Published: Oct 12, 2026, 4:43:58 PM UTC
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex_core allows an untrusted repository mirror, or a server answering hex_core's API requests, to exhaust the me
Low(3.1) Affected Details (2) 3.19.0-1 · all · bookworm
Affected
nvd · rebar3 · debian · bookworm; nvd · rebar3 · debian · 12
3.19.0-1 · all · bookworm
Affected
nvd · rebar3 · debian · bookworm; nvd · rebar3 · debian · 12
[CVE-2026-103060 ] Published: Oct 12, 2026, 3:43:57 PM UTC
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in erlang rebar3 allows a malicious package publisher to delete a directory outside the project's _build di
High(7.5) Affected Details (2) 3.19.0-1 · all · bookworm
Affected
nvd · rebar3 · debian · bookworm; nvd · rebar3 · debian · 12
3.19.0-1 · all · bookworm
Affected
nvd · rebar3 · debian · bookworm; nvd · rebar3 · debian · 12
[CVE-2026-21619 ] Published: Feb 27, 2026, 5:57:11 PM UTC
Uncontrolled Resource Consumption, Deserialization of Untrusted Data vulnerability in hexpm hex_core (hex_api modules), hexpm hex (mix_hex_api modules), erlang rebar3 (r3_hex_api modules) allows Objec
Medium(4.3) Affected Details (2) 3.19.0-1 · all · bookworm
Affected
nvd · rebar3 · debian · bookworm; nvd · rebar3 · debian · 12
3.19.0-1 · all · bookworm
Affected
nvd · rebar3 · debian · bookworm; nvd · rebar3 · debian · 12
Fixed and unaffected versions (3) CVE Severity Version impact [CVE-2026-96596 ] Published: Oct 14, 2026, 4:56:18 PM UTC
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module), hexpm hex_core (hex_erl_tar module), hexpm hex (mix_hex_erl_tar module) and erlang rebar3 (r
Medium(5.9) Not affected Details (2) 3.19.0-1 · all · bookworm
Not affected
nvd · rebar3 · debian · bookworm
3.19.0-1 · all · bookworm
Not affected
nvd · rebar3 · debian · bookworm
[CVE-2020-13802 ] Published: Sep 1, 2020, 12:00:00 AM UTC
rebar3: CVE-2020-13802
High(8.4) Not affected Details (2) 3.19.0-1 · all · bookworm
Not affected
dsa · rebar3 · debian · bookworm
3.19.0-1 · all · bookworm
Not affected
dsa · rebar3 · debian · bookworm
[CVE-2019-1000014 ] Published: Jan 2, 2019, 12:00:00 AM UTC
rebar: CVE-2019-1000014
Medium(5.5) Not affected Details (2) 3.19.0-1 · all · bookworm
Not affected
dsa · rebar3 · debian · bookworm
3.19.0-1 · all · bookworm
Not affected
dsa · rebar3 · debian · bookworm
Last synced: Oct 28, 2026, 3:52:27 AM UTC
[CVE catalog ]
Checksums Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
3.19.0-1 / all Observed Sep 1, 2026 sha256 4933123a556b…6a430bbeSource-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): 4933123a556ba1e7881c0b8b05eb381254b933390657464b420f16206a430bbe
Verify download
printf '%s %s\n' '4933123a556ba1e7881c0b8b05eb381254b933390657464b420f16206a430bbe' 'rebar3_3.19.0-1_all.deb' | sha256sum --check --strict -Field source: Debian 12 (Bookworm) main amd64
3.19.0-1 / all Observed Sep 1, 2026 sha256 4933123a556b…6a430bbeSource-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): 4933123a556ba1e7881c0b8b05eb381254b933390657464b420f16206a430bbe
Verify download
printf '%s %s\n' '4933123a556ba1e7881c0b8b05eb381254b933390657464b420f16206a430bbe' 'rebar3_3.19.0-1_all.deb' | sha256sum --check --strict -Field source: Debian 12 (Bookworm) main arm64
