VYPR

Erlang\/public Key

by Erlang

Source repositories

CVEs (2)

  • CVE-2026-59251HigJul 27, 2026
    risk 0.42cvss 7.5epss 0.00

    Allocation of resources without limits in Erlang/OTP public_key certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate chain during the TLS handshake. During RFC 5280 policy processing in…

  • CVE-2026-32144HigApr 7, 2026
    risk 0.41cvss 7.4epss 0.00

    Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_ocsp module) allows OCSP designated-responder authorization bypass via missing signature verification. The OCSP response validation in public_key:pkix_ocsp_validate/5 does not verify that a…