Login Request a demo
RE
Product
rebar3
by erlang · last CVE Oct 14, 2026
6
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 1High 3Medium 1Low 1
Severity
All severities6Critical1High3Medium1Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add rebar3 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-1000014
8.8
2%
Feb 4
Erlang/OTP Rebar3 version 3.7.0 through 3.7.5 contains a Signing oracle vulnerability in Package registry verification that can result in Package modifications not detected,…
Affected: 3.7.0 through 3.7.5
CVE-2026-103060
7.5
0%
Oct 12
Path traversal in rebar3 via unvalidated dependency app names
Affected: 3.7.0-rc1 before 3.27.2; 56b7d88975aa8da6446857cfd92de0825024bf63 before e35282b26e499b1d9e8f30bba9dccd71cd8b02ba
CVE-2026-21619
7.5
1%
Feb 27
Unsafe Deserialization of Erlang Terms in hex_core
Affected: 209c02ec57c2cc3207ee0174c3af3675b8dc8f79 before 1d4478f527e373de0b225951e53115450e0d9b9d; 3.9.1 before 3.27.0
Showing 3