VYPR
← All advisories
High severity8.8OSV Advisory· Published Feb 4, 2019· Updated Jun 17, 2026

CVE-2019-1000014

CVE-2019-1000014

Description

Erlang/OTP Rebar3 version 3.7.0 through 3.7.5 contains a Signing oracle vulnerability in Package registry verification that can result in Package modifications not detected, allowing code execution. This attack appears to be exploitable via Victim fetches packages from malicious/compromised mirror. This vulnerability appears to have been fixed in 3.8.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Erlang/Rebar3OSV3 versions
    3.7.0, 3.7.1, 3.7.2, …+ 2 more
    • (no CPE)range: 3.7.0, 3.7.1, 3.7.2, …
    • cpe:2.3:a:erlang:rebar3:*:*:*:*:*:*:*:*range: >=3.7.0,<=3.7.5
    • (no CPE)range: 3.7.0 - 3.7.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.