AZL-94208 CVE-2026-55737 affecting package erlang for versions less than 26.2.5.21-4

Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erlang external term format ETF binary to binarytoterm/1 to corrupt the BEAM heap pointer and crash the virtual machine. When decoding a LARGETUPLEEXT term, the...

EEF-CVE-2026-47077 Unbounded body accumulation in HTTP/3 response loop in hackney

Summary Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding. hackney\h3:await\response\loop/6 accumulates the HTTP/3 response body in memory without any size cap. The after Timeout clause is a per-message inactivity timer that resets on every...

PT-2026-43073

Name of the Vulnerable Software and Affected Versions hackney versions 2.0.0 through 4.0.0 Description An allocation of resources without limits or throttling allows flooding. The function await response loop/6 in hackney h3 accumulates the HTTP/3 response body in memory without a size cap. Becau...