Skip to content
Erlang Rebar3 vulnerabilities
-
erlang otp, rebar3, hexpm hex +1 more +3 more
erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole
CVE-2026-96596
Fix available
5.9 Medium
-
erlang rebar3, hexpm hex, hex core +2 more
hex_core decompresses registry and Erlang term API responses without size limits
CVE-2026-105274
Fix available
2.1 Low
-
erlang rebar3
Path traversal in rebar3 via unvalidated dependency app names
CVE-2026-103060
Fix available
7.5 High
-
erlang rebar3, hex, hex core +1 more +3 more
Unsafe Deserialization of Erlang Terms in hex_core
CVE-2026-21619
Fix available
2.0 Low
-
erlang rebar3
The rebar3 tool 3.0.0-beta.3 through 3.13.2 for Erlang allows remote code execution.
CVE-2020-13802
Fix available
9.8 Critical
-
erlang rebar3
Erlang/OTP Rebar3 version 3.7.0 through 3.7.5 contains a Signing oracle vulnerability in Package...
CVE-2019-1000014
8.8 High