Otp

This hub aggregates every CVE we track for Otp, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Otp.

• CVE-2026-54891Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl3.7Jul 2, 2026
• CVE-2026-55950DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions5.9Jul 2, 2026
• CVE-2026-54886SSH SFTP server denial of service via extended channel data infinite loop4.3Jul 2, 2026
• CVE-2026-55952TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension7.5Jul 2, 2026
• CVE-2026-54887DTLS server cookie bypass during startup window due to empty initial cookie secret4.8Jul 2, 2026
• CVE-2026-53422SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root4.3Jul 2, 2026
• CVE-2026-48856httpc leaks Authorization header to cross-origin redirect targets6.5Jun 10, 2026
• CVE-2026-48855SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured6.5Jun 10, 2026
• CVE-2026-48860Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist6.5Jun 10, 2026
• CVE-2026-48858ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks6.5Jun 10, 2026
• CVE-2026-48859SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration5.3Jun 10, 2026
• CVE-2026-49759Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crash8.2Jun 10, 2026
• CVE-2026-49760Stack Buffer Overflow in ei_s_print_term at Very Large Integer5.5Jun 10, 2026
• CVE-2026-42790nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification8.1May 27, 2026
• CVE-2026-42791OCSP responder certificate validity period not checked in public_key3.7May 27, 2026