Post

@peterullrich.com

🚨 Please update "decimal" 🚨 A *single* calculation like: Decimal.new("1e1_000_000_000") |> Decimal.add(1) will OOM your application. Poof. Adios. Auf Wiedersehen. cna.erlef.org/cves/CVE-202...

cna.erlef.orgUnbounded exponent in decimal enables unauthenticated DoSThis project handles the CVE Numbering Authority (CNA) for the Erlang Ecosystem Foundation (EEF).

@peterullrich.com

Hahahahaha! Sorry not sorry 😬

8/5/26, 6:09 pm0 reposts1 like

No replies yet.