{"action":"Upgrade erlang to 1:27.3.4.1+dfsg-1+deb13u3 or later.","affected":[{"fixed":"1:27.3.4.1+dfsg-1+deb13u3","introduced":"0"}],"component":"erlang","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["1:27.3.4.1+dfsg-1+deb13u3"],"id":"tcs_01M5NT0WEXKVGR5T8CEHPENVRS","modified_at":"2026-10-25T10:00:35.593942062Z","published_at":"2026-07-27T16:17:49.500Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-55953","https://security-tracker.debian.org/tracker/CVE-2026-55953"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-55953#Debian:13/erlang","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-55953"}],"summary":"The Erlang/OTP ssl TLS 1.2 (and earlier) and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The clie"}