UpHeron
All vulnerabilities

Servers and applications

CVE-2026-96596

erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole

Severity
Medium 5.9
Published
14 Oct 2026
Last changed
16 Oct 2026
Added to UpHeron
14 Oct 2026
Fixed in
29.1.2
Sources
CVE Program

Affected software

SoftwareAffected versions
Erlang/OTPServers and applications · cna:erlang|otp
  • From 29.0 before 29.1.2
Erlang/OTPServers and applications · cpe:a:erlang:erlang\/otp
  • From 29.0 before 29.1.2

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-96596