Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-98487.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-98487
Upstream
Published
2026-09-01T15:17:25Z
Modified
2026-09-20T05:33:47Z
Summary
CVE-2026-73276 affecting package erlang for versions less than 26.2.5.21-6
Details

Gracefulness code ignored cases that should be rejected, resulting in possible HTTP Request Smuggling opportunities.

This issue affects OTP from OTP 22.2 before OTP 27.3.4.17, from OTP 28.0 before OTP 28.5.0.6, and from OTP 29.0 before OTP 29.0.6, corresponding to inets from 7.1.2 before 9.3.2.7, from 9.4 before 9.6.2.3, and from 9.7 before 9.7.2.

References

Affected packages

Azure Linux:3 / erlang

Package

Name
erlang
Purl
pkg:rpm/azure-linux/erlang

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
26.2.5.21-6

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-98487.json"