VYPR

OTP SSH

by Erlang

Source repositories

CVEs (1)

  • CVE-2026-23943MedMar 13, 2026
    risk 0.27cvss 5.3epss 0.01

    Improper Handling of Highly Compressed Data (Compression Bomb) vulnerability in Erlang OTP ssh (ssh_transport modules) allows Denial of Service via Resource Depletion. The SSH transport layer advertises legacy zlib compression by default and inflates attacker-controlled…