Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

OESA-2026-1665 erlang security update

🗓️ 20 Mar 2026 14:24:52Reported by GoogleType 
osv
 osv🔗 osv.dev👁 5 Views

OESA-2026-1665 fixes HTTP request smuggling in inets httpd and path traversal in ssh_sftpd.

Related
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin:Improper Handling of Highly Compressed Data (Compression Bomb) vulnerability in Erlang OTP
1 Jun 202606:11
–ibm
IBM Security Bulletins		Security Bulletin: Erlang OTP inets httpd Vulnerable to HTTP Request Smuggling via Duplicate Content-Length Headers
18 May 202606:35
–ibm
IBM Security Bulletins		Security Bulletin: Erlang OTP inets httpd HTTP Request Smuggling via Duplicate Content-Length Handling
14 May 202606:23
–ibm
ATTACKERKB		CVE-2026-23943
13 Mar 202609:11
–attackerkb
ATTACKERKB		CVE-2026-23941
13 Mar 202609:11
–attackerkb
ATTACKERKB		CVE-2026-23942
13 Mar 202609:11
–attackerkb
BDU FSTEC		The vulnerability of theOTP library set in the Erlang programming language, related to deficiencies in handling http requests, allows attackers to carry out attacks by replacing HTTP requests.
25 May 202600:00
–bdu_fstec
BDU FSTEC		The vulnerability in the set of libraries for the Erlang programming language relates to incorrect restrictions on the path name to the restricted access directory. This allows a intruder to gain unauthorized access to protected information.
25 May 202600:00
–bdu_fstec
BDU FSTEC		The vulnerability of theOTP library set in the Erlang programming language arises from incorrect processing of highly compressed input data, allowing attackers to trigger a service failure.
25 May 202600:00
–bdu_fstec
CBLMariner		CVE-2026-23941 affecting package erlang for versions less than 25.3.2.21-5
18 Mar 202615:31
–cbl_mariner
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
20 Mar 2026 14:30Current
5.8Medium risk
Vulners AI Score5.8
CVSS 3.19.4
CVSS 47
EPSS0.00644
SSVC
http request smugglingpath traversal
5