Erlang/public Key vulnerabilities

2 known vulnerabilities in Erlang/public Key from Erlang. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  OTP: Allocation of Resources Without Limits or Throttling

  CVE-2026-59251Jul 27, 2026Erlang

  Allocation of resources without limits in Erlang/OTP public_key certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate chain during the TLS handshake. During RFC 5280 policy proces

• 7.4 High severity

  OTP: Improper Certificate Validation

  CVE-2026-32144Apr 7, 2026Erlang

  Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_ocsp module) allows OCSP designated-responder authorization bypass via missing signature verification. The OCSP response validation in public_key:pkix_ocsp_validate/5 does not verif