How many CVEs have patched format?

4 published CVEs changed format in erlang/otp, in 12 distinct patches totalling 293 changed lines, between 2025 and 2026.

What is the latest CVE that changed format?

CVE-2026-68956 (SSH daemon allocates unbounded idle session channels, bypassing max_channels), published 2026-09-22, changed lines 1313 to 1345 of lib/ssh/src/ssh_connection_handler.erl.

How does format compare to the rest of erlang/otp?

erlang/otp has 58 CVEs with a located fix in total; 4 of them changed format.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

RadicalNotion.AI

Log in Create an account

erlang/otp

Function

4 files

format

Name: format in erlang/otp: CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Defined in 4 files

Last patched September 22, 2026

4

CVEs

That changed this function

12

Distinct patches

Backports counted once

293

Lines changed

Added plus removed

2025–2026

Years

By CVE publication date

Overview

format in erlang/otp was changed by 4 published CVE fixes between 2025 and 2026, in 12 distinct patches that added or removed 293 lines in total.

The name occurs in 4 files: lib/ssh/src/ssh_transport.erl, lib/ssh/src/ssh_connection_handler.erl, lib/ssh/src/ssh_fsm_kexinit.erl, lib/stdlib/src/zip.erl.

erlang/otp has 58 CVEs with a located fix in total, so 7% of them touched this function.

CVEs that patched it

Every published CVE whose fix changed format, newest first, with the lines each fix touched.

SSH daemon allocates unbounded idle session channels, bypassing max_channels
CVE-2026-68956 · lib/ssh/src/ssh_connection_handler.erl · lines 1313–1345 · +26 −3
High · CVSS 7.1
EPSS 0.4%2026-09-22
Relative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypass
CVE-2026-47078 · lib/stdlib/src/zip.erl · lines 1771–1788 · +17 −11
Medium · CVSS 4.8
EPSS 0.1%2026-07-27

Malicious Key Exchange Messages may Lead to Excessive Resource Consumption

CVE-2025-48040 · lib/ssh/src/ssh_connection_handler.erl · lines 1176–1233 · +26 −9 in 2 hunks

Medium · CVSS 6.9

EPSS 0.4%2025-09-11

Malicious Key Exchange Messages may Lead to Excessive Resource Consumption

CVE-2025-48040 · lib/ssh/src/ssh_transport.erl · lines 608–898 · +49 −34 in 8 hunks

Medium · CVSS 6.9

EPSS 0.4%2025-09-11

Erlang/OTP SSH Has Strict KEX Violations

CVE-2025-46712 · lib/ssh/src/ssh_connection_handler.erl · line 730 · +0 −10

Low · CVSS 3.7

EPSS 0.5%2025-05-08

Erlang/OTP SSH Has Strict KEX Violations

CVE-2025-46712 · lib/ssh/src/ssh_fsm_kexinit.erl · lines 133–330 · +103 −5 in 4 hunks

Low · CVSS 3.7

EPSS 0.5%2025-05-08

Get an alert when the next CVE fix lands in erlang/otp, with the patched functions.

Monitor otp CVEs

Other functions in these files

Functions in the same files that CVE fixes also changed.

Other hotspots in the repository

Functions in erlang/otp changed by the most CVE fixes.

xf_send_status3 CVEs · lib/ssh/src/ssh_sftpd.erl init3 CVEs · lib/ssh/src/ssh_sftpd.erl customize_headers3 CVEs · lib/inets/src/http_server/httpd_request.erl handle_data3 CVEs · lib/ssh/src/ssh_sftpd.erl send_status2 CVEs · lib/inets/src/http_server/httpd_request_handler.erl handle_msg2 CVEs · lib/ssh/src/ssh_connection.erl

All patched functions in erlang/otp

Frequently asked questions

Common questions about CVE fixes to format.

How many CVEs have patched format?: 4 published CVEs changed format in erlang/otp, in 12 distinct patches totalling 293 changed lines, between 2025 and 2026.
What is the latest CVE that changed format?: CVE-2026-68956 (SSH daemon allocates unbounded idle session channels, bypassing max_channels), published 2026-09-22, changed lines 1313 to 1345 of lib/ssh/src/ssh_connection_handler.erl.
How does format compare to the rest of erlang/otp?: erlang/otp has 58 CVEs with a located fix in total; 4 of them changed format.
What do the line numbers refer to?: Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track erlang/otp CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing