{"id":"USN-8901-1","summary":"erlang vulnerabilities","details":"Wander Nauta discovered that Erlang incorrectly handled absolute paths when\nextracting zip archives. An attacker could possibly use this issue to write\narbitrary files outside of the intended directory. This issue only affected\nUbuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2025-4748)\n\nIt was discovered that the Erlang SFTP server did not properly limit the\nsize of packets. A remote attacker could possibly use this issue to cause\nErlang to use excessive resources, leading to a denial of service. This\nissue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and\nUbuntu 18.04 LTS. (CVE-2025-26618)\n\nIt was discovered that the Erlang SSH server did not properly limit the\nlength of algorithm names in key exchange messages. A remote attacker could\npossibly use this issue to cause Erlang to use excessive resources, leading\nto a denial of service. This issue only affected Ubuntu 14.04 LTS,\nUbuntu 16.04 LTS, and Ubuntu 18.04 LTS. (CVE-2025-30211)\n\nIt was discovered that the Erlang TFTP server incorrectly handled certain\nfile paths. A remote attacker could possibly use this issue to access files\noutside of the intended directory. (CVE-2026-21620)\n\nIt was discovered that the Erlang SFTP server incorrectly validated paths\nagainst the configured root directory. An authenticated user could possibly\nuse this issue to access files outside of the root directory.\n(CVE-2026-23942)\n\nIt was discovered that the Erlang SSH server enabled zlib compression by\ndefault and did not limit the size of decompressed data. A remote attacker\ncould possibly use this issue to cause Erlang to use excessive resources,\nleading to a denial of service. (CVE-2026-23943)\n\nIt was discovered that the Erlang HTTP server incorrectly applied directory\naccess controls to CGI scripts served via script aliases. A remote attacker\ncould possibly use this issue to bypass authentication and access protected\nCGI scripts. (CVE-2026-28808)\n\nIt was discovered that the Erlang DNS resolver used predictable transaction\nIDs and did not randomize source ports. A remote attacker could possibly\nuse this issue to perform DNS cache poisoning attacks. This issue only\naffected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS.\n(CVE-2026-28810)\n\nIt was discovered that Erlang did not verify the signatures of designated\nOCSP responder certificates. A remote attacker could possibly use this\nissue to forge OCSP responses and bypass certificate revocation checks.\nThis issue only affected Ubuntu 26.04 LTS. (CVE-2026-32144)\n\nIt was discovered that the Erlang SFTP server incorrectly handled file\nattribute changes on open file handles. An authenticated user could\npossibly use this issue to modify the attributes of files outside of the\nroot directory. (CVE-2026-32147)\n\nIt was discovered that Erlang incorrectly allowed non-CA certificates to\nact as intermediate certificate issuers. A remote attacker could possibly\nuse this issue to forge certificate chains. (CVE-2026-42789)\n\nIt was discovered that Erlang incorrectly handled DNS name constraints\nduring hostname verification. A remote attacker could possibly use this\nissue to bypass certificate validation. This issue only affected\nUbuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and\nUbuntu 26.04 LTS. (CVE-2026-42790)\n\nIt was discovered that Erlang did not check the validity period of OCSP\nresponder certificates. A remote attacker could possibly use this issue to\nforge OCSP responses using an expired responder certificate. This issue\nonly affected Ubuntu 26.04 LTS. (CVE-2026-42791)\n\nIt was discovered that Erlang incorrectly handled relative paths when\nextracting zip archives. An attacker could possibly use this issue to write\narbitrary files outside of the intended directory. This issue only affected\nUbuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and\nUbuntu 26.04 LTS. (CVE-2026-47078)\n\nIt was discovered that the Erlang SFTP server exposed absolute paths when\nreading symbolic links. An authenticated user could possibly use this issue\nto obtain sensitive information. (CVE-2026-48855)\n\nIt was discovered that the Erlang HTTP client forwarded authorization\nheaders on cross-origin redirects. A malicious HTTP server could possibly\nuse this issue to obtain sensitive information. (CVE-2026-48856)\n\nIt was discovered that the Erlang FTP client did not validate the IP\naddress in passive mode responses. A malicious FTP server could possibly\nuse this issue to perform server-side request forgery attacks.\n(CVE-2026-48858)\n\nIt was discovered that Erlang checked the local address instead of the peer\naddress when enforcing the allowlist for distribution over TLS. A remote\nattacker could possibly use this issue to bypass access restrictions. This\nissue only affected Ubuntu 26.04 LTS. (CVE-2026-48860)\n\nIt was discovered that Erlang incorrectly handled certain SCTP ERROR\nchunks, leading to a buffer overflow. A remote attacker could possibly use\nthis issue to cause Erlang to crash, resulting in a denial of service.\n(CVE-2026-49759)\n\nIt was discovered that the Erlang erl_interface library incorrectly handled\nprinting very large integers, leading to a buffer overflow. An attacker\ncould possibly use this issue to cause Erlang to crash or execute arbitrary\ncode. (CVE-2026-49760)\n\nIt was discovered that the Erlang SFTP server incorrectly handled certain\npath resolution requests. An authenticated user could possibly use this\nissue to determine the existence of files outside of the root directory.\n(CVE-2026-53422)\n\nIt was discovered that the Erlang SFTP server incorrectly handled extended\nchannel data, leading to an infinite loop. An authenticated user could\npossibly use this issue to cause a denial of service. (CVE-2026-54886)\n\nIt was discovered that the Erlang DTLS server used a predictable cookie\nsecret on startup. A remote attacker could possibly use this issue to\nbypass source address verification. This issue only affected\nUbuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and\nUbuntu 26.04 LTS. (CVE-2026-54887)\n\nIt was discovered that Erlang TLS clients incorrectly accepted application\ndata before the handshake was completed. A remote attacker could possibly\nuse this issue to inject arbitrary data into TLS connections.\n(CVE-2026-54891)\n\nIt was discovered that the Erlang DTLS server contained a race condition\nwhen handling rapid client reconnections. A remote attacker could possibly\nuse this issue to cause Erlang to crash, resulting in a denial of service.\nThis issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS.\n(CVE-2026-55950)\n\nIt was discovered that Erlang did not properly validate TLS 1.3 pre-shared\nkey extensions. A remote attacker could possibly use this issue to cause\nErlang to crash, resulting in a denial of service. This issue only affected\nUbuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS.\n(CVE-2026-55952)\n\nIt was discovered that the Erlang ASN.1 decoder incorrectly handled certain\nobject identifiers. A remote attacker could possibly use this issue to\ncause Erlang to use excessive resources, leading to a denial of service.\n(CVE-2026-65634)\n\nIt was discovered that the Erlang SSH server did not properly limit the\nnumber of open channels. An authenticated user could possibly use this\nissue to cause Erlang to use excessive resources, leading to a denial of\nservice. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS.\n(CVE-2026-68956)\n\nIt was discovered that the Erlang HTTP server incorrectly shared users and\ngroups between directories when using dets or mnesia authentication\nbackends. A remote attacker could possibly use this issue to bypass\nauthentication and access protected directories. (CVE-2026-74994)\n\nIt was discovered that Erlang TLS clients incorrectly accepted unsolicited\nTLS 1.3 pre-shared keys from servers. A remote attacker could possibly use\nthis issue to impersonate servers. This issue only affected\nUbuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS.\n(CVE-2026-89422)","modified":"2026-10-08T19:58:53.589918012Z","published":"2026-10-08T12:01:56Z","related":["UBUNTU-CVE-2025-26618","UBUNTU-CVE-2025-30211","UBUNTU-CVE-2025-4748","UBUNTU-CVE-2026-21620","UBUNTU-CVE-2026-23942","UBUNTU-CVE-2026-23943","UBUNTU-CVE-2026-28808","UBUNTU-CVE-2026-28810","UBUNTU-CVE-2026-32144","UBUNTU-CVE-2026-32147","UBUNTU-CVE-2026-42789","UBUNTU-CVE-2026-42790","UBUNTU-CVE-2026-42791","UBUNTU-CVE-2026-47078","UBUNTU-CVE-2026-48855","UBUNTU-CVE-2026-48856","UBUNTU-CVE-2026-48858","UBUNTU-CVE-2026-48860","UBUNTU-CVE-2026-49759","UBUNTU-CVE-2026-49760","UBUNTU-CVE-2026-53422","UBUNTU-CVE-2026-54886","UBUNTU-CVE-2026-54887","UBUNTU-CVE-2026-54891","UBUNTU-CVE-2026-55950","UBUNTU-CVE-2026-55952","UBUNTU-CVE-2026-65634","UBUNTU-CVE-2026-68956","UBUNTU-CVE-2026-74994","UBUNTU-CVE-2026-89422"],"upstream":["CVE-2025-26618","CVE-2025-30211","CVE-2025-4748","CVE-2026-21620","CVE-2026-23942","CVE-2026-23943","CVE-2026-28808","CVE-2026-28810","CVE-2026-32144","CVE-2026-32147","CVE-2026-42789","CVE-2026-42790","CVE-2026-42791","CVE-2026-47078","CVE-2026-48855","CVE-2026-48856","CVE-2026-48858","CVE-2026-48860","CVE-2026-49759","CVE-2026-49760","CVE-2026-53422","CVE-2026-54886","CVE-2026-54887","CVE-2026-54891","CVE-2026-55950","CVE-2026-55952","CVE-2026-65634","CVE-2026-68956","CVE-2026-74994","CVE-2026-89422","UBUNTU-CVE-2025-26618","UBUNTU-CVE-2025-30211","UBUNTU-CVE-2025-4748","UBUNTU-CVE-2026-21620","UBUNTU-CVE-2026-23942","UBUNTU-CVE-2026-23943","UBUNTU-CVE-2026-28808","UBUNTU-CVE-2026-28810","UBUNTU-CVE-2026-32144","UBUNTU-CVE-2026-32147","UBUNTU-CVE-2026-42789","UBUNTU-CVE-2026-42790","UBUNTU-CVE-2026-42791","UBUNTU-CVE-2026-47078","UBUNTU-CVE-2026-48855","UBUNTU-CVE-2026-48856","UBUNTU-CVE-2026-48858","UBUNTU-CVE-2026-48860","UBUNTU-CVE-2026-49759","UBUNTU-CVE-2026-49760","UBUNTU-CVE-2026-53422","UBUNTU-CVE-2026-54886","UBUNTU-CVE-2026-54887","UBUNTU-CVE-2026-54891","UBUNTU-CVE-2026-55950","UBUNTU-CVE-2026-55952","UBUNTU-CVE-2026-65634","UBUNTU-CVE-2026-68956","UBUNTU-CVE-2026-74994","UBUNTU-CVE-2026-89422"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-8901-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2025-4748"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2025-26618"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2025-30211"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-21620"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-23942"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-23943"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-28808"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-28810"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-32144"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-32147"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-42789"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-42790"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-42791"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-47078"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-48855"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-48856"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-48858"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-48860"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-49759"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-49760"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-53422"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-54886"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-54887"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-54891"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-55950"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-55952"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-65634"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-68956"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-74994"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-89422"}],"affected":[{"package":{"name":"erlang","ecosystem":"Ubuntu:Pro:14.04:LTS","purl":"pkg:deb/ubuntu/erlang?arch=source&distro=esm-infra-legacy%2Ftrusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.b.3-dfsg-1ubuntu2.2+esm3"}]}],"versions":["1:16.b.1-dfsg-4ubuntu1","1:16.b.2-dfsg-1ubuntu1","1:16.b.2-dfsg-2ubuntu1","1:16.b.3-dfsg-1ubuntu1","1:16.b.3-dfsg-1ubuntu2","1:16.b.3-dfsg-1ubuntu2.1","1:16.b.3-dfsg-1ubuntu2.2","1:16.b.3-dfsg-1ubuntu2.2+esm1","1:16.b.3-dfsg-1ubuntu2.2+esm2"],"ecosystem_specific":{"binaries":[{"binary_name":"erlang","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_name":"erlang-appmon","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_name":"erlang-asn1","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3","binary_name":"erlang-base"},{"binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3","binary_name":"erlang-base-hipe"},{"binary_name":"erlang-common-test","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_name":"erlang-corba","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_name":"erlang-crypto","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_name":"erlang-debugger","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_name":"erlang-dialyzer","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_name":"erlang-diameter","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_name":"erlang-edoc","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3","binary_name":"erlang-eldap"},{"binary_name":"erlang-erl-docgen","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_name":"erlang-et","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_name":"erlang-eunit","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3","binary_name":"erlang-examples"},{"binary_name":"erlang-gs","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3","binary_name":"erlang-ic"},{"binary_name":"erlang-ic-java","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3","binary_name":"erlang-inets"},{"binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3","binary_name":"erlang-jinterface"},{"binary_name":"erlang-manpages","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3","binary_name":"erlang-megaco"},{"binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3","binary_name":"erlang-mnesia"},{"binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3","binary_name":"erlang-mode"},{"binary_name":"erlang-nox","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3","binary_name":"erlang-observer"},{"binary_name":"erlang-odbc","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3","binary_name":"erlang-os-mon"},{"binary_name":"erlang-parsetools","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_name":"erlang-percept","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3","binary_name":"erlang-pman"},{"binary_name":"erlang-public-key","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3","binary_name":"erlang-reltool"},{"binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3","binary_name":"erlang-runtime-tools"},{"binary_name":"erlang-snmp","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_name":"erlang-src","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3","binary_name":"erlang-ssh"},{"binary_name":"erlang-ssl","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_name":"erlang-syntax-tools","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_name":"erlang-test-server","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_name":"erlang-toolbar","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_name":"erlang-tools","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_name":"erlang-tv","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3","binary_name":"erlang-typer"},{"binary_name":"erlang-webtool","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_name":"erlang-x11","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"},{"binary_name":"erlang-xmerl","binary_version":"1:16.b.3-dfsg-1ubuntu2.2+esm3"}],"availability":"Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2025-26618","severity":[{"score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","type":"CVSS_V4"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2025-30211","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-21620","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"Ubuntu","score":"low"}]},{"id":"CVE-2026-23942","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-23943"},{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-28808"},{"id":"CVE-2026-32147","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N","type":"CVSS_V4"},{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-42789"},{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-48855"},{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-48856"},{"id":"CVE-2026-48858","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-49759","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-49760","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-53422","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-54886","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-54891"},{"id":"CVE-2026-65634","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-74994","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"type":"Ubuntu","score":"medium"}]}],"ecosystem":"Ubuntu:Pro:14.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8901-1.json"}},{"package":{"name":"erlang","ecosystem":"Ubuntu:Pro:16.04:LTS","purl":"pkg:deb/ubuntu/erlang?arch=source&distro=esm-infra-legacy%2Fxenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.3-dfsg-1ubuntu3.1+esm4"}]}],"versions":["1:18.0-dfsg-1ubuntu1","1:18.0-dfsg-1ubuntu2","1:18.2-dfsg-2ubuntu1","1:18.3-dfsg-1ubuntu1","1:18.3-dfsg-1ubuntu2","1:18.3-dfsg-1ubuntu3","1:18.3-dfsg-1ubuntu3.1","1:18.3-dfsg-1ubuntu3.1+esm1","1:18.3-dfsg-1ubuntu3.1+esm2","1:18.3-dfsg-1ubuntu3.1+esm3"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro","binaries":[{"binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4","binary_name":"erlang"},{"binary_name":"erlang-asn1","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_name":"erlang-base","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_name":"erlang-base-hipe","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_name":"erlang-common-test","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_name":"erlang-corba","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_name":"erlang-crypto","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_name":"erlang-debugger","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_name":"erlang-dialyzer","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_name":"erlang-diameter","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_name":"erlang-edoc","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_name":"erlang-eldap","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4","binary_name":"erlang-erl-docgen"},{"binary_name":"erlang-et","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4","binary_name":"erlang-eunit"},{"binary_name":"erlang-examples","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_name":"erlang-gs","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_name":"erlang-ic","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_name":"erlang-ic-java","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4","binary_name":"erlang-inets"},{"binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4","binary_name":"erlang-jinterface"},{"binary_name":"erlang-manpages","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_name":"erlang-megaco","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_name":"erlang-mnesia","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4","binary_name":"erlang-mode"},{"binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4","binary_name":"erlang-nox"},{"binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4","binary_name":"erlang-observer"},{"binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4","binary_name":"erlang-odbc"},{"binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4","binary_name":"erlang-os-mon"},{"binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4","binary_name":"erlang-parsetools"},{"binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4","binary_name":"erlang-percept"},{"binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4","binary_name":"erlang-public-key"},{"binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4","binary_name":"erlang-reltool"},{"binary_name":"erlang-runtime-tools","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4","binary_name":"erlang-snmp"},{"binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4","binary_name":"erlang-src"},{"binary_name":"erlang-ssh","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4","binary_name":"erlang-ssl"},{"binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4","binary_name":"erlang-syntax-tools"},{"binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4","binary_name":"erlang-test-server"},{"binary_name":"erlang-tools","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_name":"erlang-typer","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_name":"erlang-webtool","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_name":"erlang-wx","binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4"},{"binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4","binary_name":"erlang-x11"},{"binary_version":"1:18.3-dfsg-1ubuntu3.1+esm4","binary_name":"erlang-xmerl"}]},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:Pro:16.04:LTS","cves":[{"id":"CVE-2025-4748","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2025-26618"},{"id":"CVE-2025-30211","severity":[{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-21620","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"low","type":"Ubuntu"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-23942"},{"id":"CVE-2026-23943","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-28808"},{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N","type":"CVSS_V4"},{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-32147"},{"id":"CVE-2026-42789","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-48855"},{"id":"CVE-2026-48856","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-48858","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-49759","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-49760","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-53422"},{"id":"CVE-2026-54886","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-54891"},{"id":"CVE-2026-65634","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-68956","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-74994"}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8901-1.json"}},{"package":{"name":"erlang","ecosystem":"Ubuntu:Pro:18.04:LTS","purl":"pkg:deb/ubuntu/erlang?arch=source&distro=esm-infra%2Fbionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.2.2+dfsg-1ubuntu2+esm4"}]}],"versions":["1:20.0.4+dfsg-1ubuntu1","1:20.1.2+dfsg-1ubuntu1","1:20.1.3+dfsg-1ubuntu1","1:20.1.4+dfsg-1ubuntu1","1:20.1.5+dfsg-1ubuntu1","1:20.1.6+dfsg-1ubuntu1","1:20.1.7+dfsg-1ubuntu1","1:20.2.1+dfsg-1ubuntu1","1:20.2.2+dfsg-1ubuntu1","1:20.2.2+dfsg-1ubuntu2","1:20.2.2+dfsg-1ubuntu2+esm1","1:20.2.2+dfsg-1ubuntu2+esm2","1:20.2.2+dfsg-1ubuntu2+esm3"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro","binaries":[{"binary_name":"erlang","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4","binary_name":"erlang-asn1"},{"binary_name":"erlang-base","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_name":"erlang-base-hipe","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_name":"erlang-common-test","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_name":"erlang-corba","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4","binary_name":"erlang-crypto"},{"binary_name":"erlang-debugger","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_name":"erlang-dialyzer","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_name":"erlang-diameter","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_name":"erlang-edoc","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_name":"erlang-eldap","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_name":"erlang-erl-docgen","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_name":"erlang-et","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_name":"erlang-eunit","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_name":"erlang-examples","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_name":"erlang-ic","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_name":"erlang-ic-java","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_name":"erlang-inets","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_name":"erlang-jinterface","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4","binary_name":"erlang-manpages"},{"binary_name":"erlang-megaco","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_name":"erlang-mnesia","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4","binary_name":"erlang-mode"},{"binary_name":"erlang-nox","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4","binary_name":"erlang-observer"},{"binary_name":"erlang-odbc","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4","binary_name":"erlang-os-mon"},{"binary_name":"erlang-parsetools","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4","binary_name":"erlang-public-key"},{"binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4","binary_name":"erlang-reltool"},{"binary_name":"erlang-runtime-tools","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_name":"erlang-snmp","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4","binary_name":"erlang-src"},{"binary_name":"erlang-ssh","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_name":"erlang-ssl","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4","binary_name":"erlang-syntax-tools"},{"binary_name":"erlang-tools","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4","binary_name":"erlang-wx"},{"binary_name":"erlang-x11","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"},{"binary_name":"erlang-xmerl","binary_version":"1:20.2.2+dfsg-1ubuntu2+esm4"}]},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2025-4748","severity":[{"score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L","type":"CVSS_V4"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2025-26618"},{"id":"CVE-2025-30211","severity":[{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-21620","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"low","type":"Ubuntu"}]},{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-23942"},{"id":"CVE-2026-23943","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-28808","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-32147"},{"id":"CVE-2026-42789","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-42790"},{"id":"CVE-2026-47078","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-48855","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-48856"},{"id":"CVE-2026-48858","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-49759","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","type":"CVSS_V3"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-49760"},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-53422"},{"id":"CVE-2026-54886","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-54887","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-54891","severity":[{"score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-65634","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-68956","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-74994","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"medium","type":"Ubuntu"}]}],"ecosystem":"Ubuntu:Pro:18.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8901-1.json"}},{"package":{"name":"erlang","ecosystem":"Ubuntu:Pro:20.04:LTS","purl":"pkg:deb/ubuntu/erlang?arch=source&distro=esm-infra%2Ffocal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:22.2.7+dfsg-1ubuntu0.5+esm3"}]}],"versions":["1:22.0.7+dfsg-1build1","1:22.2+dfsg-1","1:22.2.1+dfsg-1","1:22.2.2+dfsg-1","1:22.2.3+dfsg-1","1:22.2.3+dfsg-2","1:22.2.4+dfsg-1","1:22.2.7+dfsg-1","1:22.2.7+dfsg-1ubuntu0.2","1:22.2.7+dfsg-1ubuntu0.3","1:22.2.7+dfsg-1ubuntu0.4","1:22.2.7+dfsg-1ubuntu0.5","1:22.2.7+dfsg-1ubuntu0.5+esm1","1:22.2.7+dfsg-1ubuntu0.5+esm2"],"ecosystem_specific":{"binaries":[{"binary_name":"erlang","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3","binary_name":"erlang-asn1"},{"binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3","binary_name":"erlang-base"},{"binary_name":"erlang-base-hipe","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_name":"erlang-common-test","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_name":"erlang-crypto","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_name":"erlang-debugger","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3","binary_name":"erlang-dialyzer"},{"binary_name":"erlang-diameter","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_name":"erlang-edoc","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_name":"erlang-eldap","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3","binary_name":"erlang-erl-docgen"},{"binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3","binary_name":"erlang-et"},{"binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3","binary_name":"erlang-eunit"},{"binary_name":"erlang-examples","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3","binary_name":"erlang-ftp"},{"binary_name":"erlang-inets","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3","binary_name":"erlang-jinterface"},{"binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3","binary_name":"erlang-manpages"},{"binary_name":"erlang-megaco","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3","binary_name":"erlang-mnesia"},{"binary_name":"erlang-mode","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_name":"erlang-nox","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_name":"erlang-observer","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_name":"erlang-odbc","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_name":"erlang-os-mon","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_name":"erlang-parsetools","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_name":"erlang-public-key","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3","binary_name":"erlang-reltool"},{"binary_name":"erlang-runtime-tools","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3","binary_name":"erlang-snmp"},{"binary_name":"erlang-src","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3","binary_name":"erlang-ssh"},{"binary_name":"erlang-ssl","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_name":"erlang-syntax-tools","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_name":"erlang-tftp","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_name":"erlang-tools","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"},{"binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3","binary_name":"erlang-wx"},{"binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3","binary_name":"erlang-x11"},{"binary_name":"erlang-xmerl","binary_version":"1:22.2.7+dfsg-1ubuntu0.5+esm3"}],"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:Pro:20.04:LTS","cves":[{"id":"CVE-2025-4748","severity":[{"score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L","type":"CVSS_V4"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-21620","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"Ubuntu","score":"low"}]},{"id":"CVE-2026-23942","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-23943","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-28808"},{"id":"CVE-2026-32147","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-42789","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N","type":"CVSS_V3"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-42790"},{"id":"CVE-2026-47078","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-48855","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-48856"},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-48858"},{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-49759"},{"id":"CVE-2026-49760","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-53422"},{"id":"CVE-2026-54886","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-54887","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-54891","severity":[{"score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-55952"},{"id":"CVE-2026-65634","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-68956"},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-74994"},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-89422"}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8901-1.json"}},{"package":{"name":"erlang","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/erlang?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:24.2.1+dfsg-1ubuntu0.8"}]}],"versions":["1:23.2.6+dfsg-1build1","1:24.1.1+dfsg-1","1:24.1.4+dfsg-1","1:24.1.5+dfsg-1","1:24.1.5+dfsg-1ubuntu1","1:24.2+dfsg-1","1:24.2.1+dfsg-1","1:24.2.1+dfsg-1ubuntu0.1","1:24.2.1+dfsg-1ubuntu0.2","1:24.2.1+dfsg-1ubuntu0.3","1:24.2.1+dfsg-1ubuntu0.4","1:24.2.1+dfsg-1ubuntu0.5","1:24.2.1+dfsg-1ubuntu0.6","1:24.2.1+dfsg-1ubuntu0.7"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"erlang","binary_version":"1:24.2.1+dfsg-1ubuntu0.8"},{"binary_name":"erlang-asn1","binary_version":"1:24.2.1+dfsg-1ubuntu0.8"},{"binary_version":"1:24.2.1+dfsg-1ubuntu0.8","binary_name":"erlang-base"},{"binary_version":"1:24.2.1+dfsg-1ubuntu0.8","binary_name":"erlang-common-test"},{"binary_version":"1:24.2.1+dfsg-1ubuntu0.8","binary_name":"erlang-crypto"},{"binary_name":"erlang-debugger","binary_version":"1:24.2.1+dfsg-1ubuntu0.8"},{"binary_name":"erlang-dialyzer","binary_version":"1:24.2.1+dfsg-1ubuntu0.8"},{"binary_version":"1:24.2.1+dfsg-1ubuntu0.8","binary_name":"erlang-diameter"},{"binary_version":"1:24.2.1+dfsg-1ubuntu0.8","binary_name":"erlang-edoc"},{"binary_version":"1:24.2.1+dfsg-1ubuntu0.8","binary_name":"erlang-eldap"},{"binary_name":"erlang-erl-docgen","binary_version":"1:24.2.1+dfsg-1ubuntu0.8"},{"binary_name":"erlang-et","binary_version":"1:24.2.1+dfsg-1ubuntu0.8"},{"binary_version":"1:24.2.1+dfsg-1ubuntu0.8","binary_name":"erlang-eunit"},{"binary_name":"erlang-examples","binary_version":"1:24.2.1+dfsg-1ubuntu0.8"},{"binary_name":"erlang-ftp","binary_version":"1:24.2.1+dfsg-1ubuntu0.8"},{"binary_name":"erlang-inets","binary_version":"1:24.2.1+dfsg-1ubuntu0.8"},{"binary_name":"erlang-jinterface","binary_version":"1:24.2.1+dfsg-1ubuntu0.8"},{"binary_version":"1:24.2.1+dfsg-1ubuntu0.8","binary_name":"erlang-manpages"},{"binary_name":"erlang-megaco","binary_version":"1:24.2.1+dfsg-1ubuntu0.8"},{"binary_name":"erlang-mnesia","binary_version":"1:24.2.1+dfsg-1ubuntu0.8"},{"binary_version":"1:24.2.1+dfsg-1ubuntu0.8","binary_name":"erlang-mode"},{"binary_version":"1:24.2.1+dfsg-1ubuntu0.8","binary_name":"erlang-nox"},{"binary_version":"1:24.2.1+dfsg-1ubuntu0.8","binary_name":"erlang-observer"},{"binary_version":"1:24.2.1+dfsg-1ubuntu0.8","binary_name":"erlang-odbc"},{"binary_name":"erlang-os-mon","binary_version":"1:24.2.1+dfsg-1ubuntu0.8"},{"binary_name":"erlang-parsetools","binary_version":"1:24.2.1+dfsg-1ubuntu0.8"},{"binary_version":"1:24.2.1+dfsg-1ubuntu0.8","binary_name":"erlang-public-key"},{"binary_version":"1:24.2.1+dfsg-1ubuntu0.8","binary_name":"erlang-reltool"},{"binary_name":"erlang-runtime-tools","binary_version":"1:24.2.1+dfsg-1ubuntu0.8"},{"binary_name":"erlang-snmp","binary_version":"1:24.2.1+dfsg-1ubuntu0.8"},{"binary_name":"erlang-src","binary_version":"1:24.2.1+dfsg-1ubuntu0.8"},{"binary_name":"erlang-ssh","binary_version":"1:24.2.1+dfsg-1ubuntu0.8"},{"binary_version":"1:24.2.1+dfsg-1ubuntu0.8","binary_name":"erlang-ssl"},{"binary_name":"erlang-syntax-tools","binary_version":"1:24.2.1+dfsg-1ubuntu0.8"},{"binary_version":"1:24.2.1+dfsg-1ubuntu0.8","binary_name":"erlang-tftp"},{"binary_version":"1:24.2.1+dfsg-1ubuntu0.8","binary_name":"erlang-tools"},{"binary_name":"erlang-wx","binary_version":"1:24.2.1+dfsg-1ubuntu0.8"},{"binary_name":"erlang-x11","binary_version":"1:24.2.1+dfsg-1ubuntu0.8"},{"binary_version":"1:24.2.1+dfsg-1ubuntu0.8","binary_name":"erlang-xmerl"}]},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:22.04:LTS","cves":[{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"score":"low","type":"Ubuntu"}],"id":"CVE-2026-21620"},{"id":"CVE-2026-23942","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-23943","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-28808","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-28810"},{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-32147"},{"id":"CVE-2026-42789","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-42790"},{"id":"CVE-2026-47078","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-48855"},{"id":"CVE-2026-48856","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-48858","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N","type":"CVSS_V4"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-49759","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-49760","severity":[{"score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-53422","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-54886","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-54887"},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-54891"},{"id":"CVE-2026-55952","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-65634","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-68956"},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-74994"},{"id":"CVE-2026-89422","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"type":"Ubuntu","score":"medium"}]}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8901-1.json"}},{"package":{"name":"erlang","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/erlang?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.3.2.8+dfsg-1ubuntu4.8"}]}],"versions":["1:25.2.3+dfsg-1","1:25.3.2.8+dfsg-1","1:25.3.2.8+dfsg-1ubuntu1","1:25.3.2.8+dfsg-1ubuntu3","1:25.3.2.8+dfsg-1ubuntu4","1:25.3.2.8+dfsg-1ubuntu4.1","1:25.3.2.8+dfsg-1ubuntu4.2","1:25.3.2.8+dfsg-1ubuntu4.3","1:25.3.2.8+dfsg-1ubuntu4.4","1:25.3.2.8+dfsg-1ubuntu4.5","1:25.3.2.8+dfsg-1ubuntu4.6","1:25.3.2.8+dfsg-1ubuntu4.7"],"ecosystem_specific":{"binaries":[{"binary_name":"erlang","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_name":"erlang-asn1","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_name":"erlang-base","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_name":"erlang-common-test","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_name":"erlang-crypto","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8","binary_name":"erlang-debugger"},{"binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8","binary_name":"erlang-dialyzer"},{"binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8","binary_name":"erlang-diameter"},{"binary_name":"erlang-edoc","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8","binary_name":"erlang-eldap"},{"binary_name":"erlang-erl-docgen","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_name":"erlang-et","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_name":"erlang-eunit","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8","binary_name":"erlang-examples"},{"binary_name":"erlang-ftp","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8","binary_name":"erlang-inets"},{"binary_name":"erlang-jinterface","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8","binary_name":"erlang-manpages"},{"binary_name":"erlang-megaco","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_name":"erlang-mnesia","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_name":"erlang-mode","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8","binary_name":"erlang-nox"},{"binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8","binary_name":"erlang-observer"},{"binary_name":"erlang-odbc","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_name":"erlang-os-mon","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_name":"erlang-parsetools","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8","binary_name":"erlang-public-key"},{"binary_name":"erlang-reltool","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_name":"erlang-runtime-tools","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_name":"erlang-snmp","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_name":"erlang-src","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_name":"erlang-ssh","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_name":"erlang-ssl","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_name":"erlang-syntax-tools","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_name":"erlang-tftp","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_name":"erlang-tools","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_name":"erlang-wx","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_name":"erlang-x11","binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8"},{"binary_version":"1:25.3.2.8+dfsg-1ubuntu4.8","binary_name":"erlang-xmerl"}],"availability":"No subscription required"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8901-1.json","cves_map":{"ecosystem":"Ubuntu:24.04:LTS","cves":[{"id":"CVE-2026-21620","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"Ubuntu","score":"low"}]},{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-23942"},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-23943"},{"id":"CVE-2026-28808","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-28810"},{"id":"CVE-2026-32147","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-42789","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-42790"},{"id":"CVE-2026-47078","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-48855","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-48856","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-48858","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-49759","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-49760","severity":[{"score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-53422"},{"id":"CVE-2026-54886","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-54887"},{"id":"CVE-2026-54891","severity":[{"score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-55950"},{"id":"CVE-2026-55952","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-65634"},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-68956"},{"id":"CVE-2026-74994","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-89422","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"medium","type":"Ubuntu"}]}]}}},{"package":{"name":"erlang","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/erlang?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.3.4.6+dfsg-1ubuntu0.2"}]}],"versions":["1:27.3.4.1+dfsg-1build1","1:27.3.4.3+dfsg-1","1:27.3.4.4+dfsg-1","1:27.3.4.6+dfsg-1","1:27.3.4.6+dfsg-1ubuntu0.1"],"ecosystem_specific":{"binaries":[{"binary_name":"erlang","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_name":"erlang-asn1","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2","binary_name":"erlang-base"},{"binary_name":"erlang-common-test","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2","binary_name":"erlang-crypto"},{"binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2","binary_name":"erlang-debugger"},{"binary_name":"erlang-dialyzer","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2","binary_name":"erlang-diameter"},{"binary_name":"erlang-edoc","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_name":"erlang-eldap","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_name":"erlang-et","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_name":"erlang-eunit","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_name":"erlang-examples","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_name":"erlang-ftp","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_name":"erlang-inets","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_name":"erlang-jinterface","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_name":"erlang-megaco","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2","binary_name":"erlang-mnesia"},{"binary_name":"erlang-mode","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_name":"erlang-nox","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_name":"erlang-observer","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_name":"erlang-odbc","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2","binary_name":"erlang-os-mon"},{"binary_name":"erlang-parsetools","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2","binary_name":"erlang-public-key"},{"binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2","binary_name":"erlang-reltool"},{"binary_name":"erlang-runtime-tools","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_name":"erlang-snmp","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_name":"erlang-src","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_name":"erlang-ssh","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2","binary_name":"erlang-ssl"},{"binary_name":"erlang-syntax-tools","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2","binary_name":"erlang-tftp"},{"binary_name":"erlang-tools","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"},{"binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2","binary_name":"erlang-wx"},{"binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2","binary_name":"erlang-x11"},{"binary_name":"erlang-xmerl","binary_version":"1:27.3.4.6+dfsg-1ubuntu0.2"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:26.04:LTS","cves":[{"id":"CVE-2026-21620","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"low","type":"Ubuntu"}]},{"id":"CVE-2026-23942","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-23943","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-28808","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","type":"CVSS_V3"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-28810","severity":[{"score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-32144"},{"id":"CVE-2026-32147","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-42789","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-42790","severity":[{"score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-42791","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-47078","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-48855","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-48856","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-48858","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"score":"CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-48860"},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-49759"},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-49760"},{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-53422"},{"id":"CVE-2026-54886","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-54887","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-54891"},{"id":"CVE-2026-55950","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-55952","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-65634","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-68956","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-74994"},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-89422"}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8901-1.json"}}],"schema_version":"1.9.0"}