Security Bulletin: erlang

Summary This entire batch of CVEs represents a coordinated vulnerability disclosure for Erlang/OTP, affecting components within the built-in inets httpc / httpd application and the snmp library. Vulnerability Details CVEID:CVE-2026-55951 DESCRIPTION: The Erlang/OTP httpc HTTP client does not...

Security Bulletin: erlang-OTP

Summary It is a memory exhaustion denial-of-service vulnerability in the Erlang/OTP httpc HTTP client Vulnerability Details CVEID:CVE-2026-55951 DESCRIPTION: The Erlang/OTP httpc HTTP client does not enforce a limit on the total size of response headers received from a server. The maxheadersize...

PT-2026-89914

The Erlang/OTP httpc HTTP client does not enforce a limit on the total size of response headers received from a server. The max header size option defaults to nolimit, and httpc response:parse headers/6 accumulates every header into a list before the length check runs which only fires after the...