{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"erlang","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":[],"id":"tcs_01M5NT0W60Q1RHZ2HG29AVE464","modified_at":"2026-10-25T10:00:35.593942062Z","published_at":"2026-07-27T16:17:49.500Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-55953","https://security-tracker.debian.org/tracker/CVE-2026-55953"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-55953","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-55953"}],"summary":"The Erlang/OTP ssl TLS 1.2 (and earlier) and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The clie"}