Synced 02 Nov 2026 13:39 UTC Account

Is Erlang/OTP 20.3.8.26 patched?

Erlang · cycle 20.3
20.3.8.260/100Critical · exploited

Current stable (29.1.2): 100/100

Minimum safe version27.3.4.15

20.3.8.26 has 10 open critical-or-high vulnerabilities. Run 27.3.4.15 or later to clear them. See what 27.3.4.15 fixes →

Upgrade impact: Major upgrade (7 major versions). Crossing a major version usually means breaking changes. Review the vendor’s upgrade / migration guide and test before you roll it out.

Health score0/100
Open issues25
Exploited now1
Cycle 20.3 EOL—
Latest release29.1.2

Summary iPlain-English security status for Erlang/OTP 20.3.8.26, built from its CVEs, active-exploitation data, end-of-life date and latest release.

Erlang/OTP 20.3.8.26 is part of the 20.3 release line. 1 actively-exploited vulnerability affects it (CISA KEV). The minimum safe version is 27.3.4.15 — upgrade to it or later to clear the open critical/high issues. The latest supported Erlang/OTP release is 29.1.2.

Known issues affecting 20.3.8.26

Exploited first, then by exploitation probability.

CVE-2025-32433 CRITICAL exploited EPSS 99% → fixed in 27.3.3 CVE-2023-48795 MEDIUM EPSS 94% → fixed in 26.2.1 CVE-2022-37026 CRITICAL EPSS 1% → fixed in 25.0.2 CVE-2016-1000107 MEDIUM EPSS 1% → see advisory CVE-2020-35733 HIGH EPSS 1% → fixed in 23.2.2 CVE-2026-23943 MEDIUM EPSS 1% → fixed in 28.4.1 CVE-2021-29221 HIGH EPSS 1% → fixed in 23.2.3 CVE-2026-28808 CRITICAL EPSS 1% → fixed in 28.4.2 CVE-2026-49759 HIGH EPSS 0% → fixed in 29.0.2 CVE-2026-23941 CRITICAL EPSS 0% → fixed in 28.4.1 CVE-2026-42792 HIGH EPSS 0% → fixed in 29.0.4 CVE-2026-23942 MEDIUM EPSS 0% → fixed in 28.4.1 CVE-2026-42789 MEDIUM EPSS 0% → fixed in 29.0.1 CVE-2026-32147 MEDIUM EPSS 0% → fixed in 28.4.3 CVE-2026-42790 HIGH EPSS 0% → fixed in 29.0.1 CVE-2026-48856 MEDIUM EPSS 0% → fixed in 29.0.2 CVE-2026-54886 MEDIUM EPSS 0% → fixed in 29.0.3 CVE-2026-48855 MEDIUM EPSS 0% → fixed in 29.0.2 CVE-2026-28810 LOW EPSS 0% → fixed in 28.4.2 CVE-2026-53422 MEDIUM EPSS 0% → fixed in 29.0.3

Other Erlang/OTP versions

Check another release line of Erlang/OTP.

Erlang/OTP 29.1.2Erlang/OTP 28.5.0.8Erlang/OTP 27.3.4.19Erlang/OTP 26.2.5.21Erlang/OTP 25.3.2.21Erlang/OTP 24.3.4.17Erlang/OTP 23.3.4.20Erlang/OTP 22.3.4.27Erlang/OTP 21.3.8.24Erlang/OTP 19.3.6.13Erlang/OTP 18.3.4.11Erlang/OTP 17.5.6.10

Frequently asked

Is Erlang/OTP 20.3.8.26 patched?

No — 1 actively-exploited vulnerability affects Erlang/OTP 20.3.8.26. Upgrade to at least 27.3.4.15.

What version should I upgrade Erlang/OTP 20.3.8.26 to?

Upgrade Erlang/OTP 20.3.8.26 to at least 27.3.4.15 to clear its 10 open critical-or-high vulnerabilities.

What is the latest version of Erlang/OTP?

The latest supported Erlang/OTP release is 29.1.2.

Is Erlang/OTP 20.3.8.26 still receiving security updates?

Yes — the 20.3 line is still supported and receiving security updates. The latest release is 29.1.2.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Erlang's official advisory before you patch or upgrade.