CNNVD-202509-1677 Information
CNNVD ID
CNNVD-202509-1677
Related CVE
- CNNVD Published: 2025-09-11
Description (Chinese)
Erlang/OTP是Erlang/OTP开源的一个JavaScript编写的处理处理异常的库。该库可以捕捉node.js内置API引发的异常。 Erlang/OTP 17.0版本至28.0.3版本和27.3.4.3版本和26.2.5.15版本存在安全漏洞，该漏洞源于资源分配无限制或节流，可能导致资源过度分配和泄露。
Description (English)
Erlang/OTP is a JavaScript repository for processing anomalies prepared by Erlang/OTP Open Source. The library captures anomalies caused by the API that is embedded in Node.js. Erlang/OTP 17.0 to 28.0.3 and 27.3.4 and 26.2.5.15 had a security loophole, which stemmed from unrestricted or no-flow distribution of resources and could lead to overallocation and leakage of resources.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Erlang/OTP
Published
2025-09-11
Last Modified
2026-02-24
References
https://github.com/erlang/otp/commit/043ee3c943e2977c1acdd740ad13992fd60b6bf0 https://github.com/erlang/otp/commit/c242e6458967e9514bea351814151695807a54ac https://github.com/erlang/otp/pull/10155 https://github.com/erlang/otp/security/advisories/GHSA-rr5p-6856-j7h8 https://www.erlang.org/doc/system/versions.html#order-of-versions
Patch
https://github.com/erlang/otp/releases
Share on: