Is Erlang/OTP 25.3.2.21 patched?
Current stable (29.1.2): 100/100
25.3.2.21 has 9 open critical-or-high vulnerabilities. Run 27.3.4.15 or later to clear them. See what 27.3.4.15 fixes →
Upgrade impact: Major upgrade (2 major versions). Crossing a major version usually means breaking changes. Review the vendor’s upgrade / migration guide and test before you roll it out.
Summary iPlain-English security status for Erlang/OTP 25.3.2.21, built from its CVEs, active-exploitation data, end-of-life date and latest release.
Erlang/OTP 25.3.2.21 is part of the 25.3 release line. 23 known vulnerabilities affect it. The minimum safe version is 27.3.4.15 — upgrade to it or later to clear the open critical/high issues. The latest supported Erlang/OTP release is 29.1.2.
Known issues affecting 25.3.2.21
Exploited first, then by exploitation probability.
CVE-2026-23943 MEDIUM EPSS 1% → fixed in 28.4.1 CVE-2026-28808 CRITICAL EPSS 1% → fixed in 28.4.2 CVE-2026-49759 HIGH EPSS 0% → fixed in 29.0.2 CVE-2026-23941 CRITICAL EPSS 0% → fixed in 28.4.1 CVE-2026-55952 HIGH EPSS 0% → fixed in 29.0.3 CVE-2026-42792 HIGH EPSS 0% → fixed in 29.0.4 CVE-2026-58227 HIGH EPSS 0% → fixed in 29.0.4 CVE-2026-23942 MEDIUM EPSS 0% → fixed in 28.4.1 CVE-2026-42789 MEDIUM EPSS 0% → fixed in 29.0.1 CVE-2026-55950 MEDIUM EPSS 0% → fixed in 29.0.3 CVE-2026-32147 MEDIUM EPSS 0% → fixed in 28.4.3 CVE-2026-42790 HIGH EPSS 0% → fixed in 29.0.1 CVE-2026-48856 MEDIUM EPSS 0% → fixed in 29.0.2 CVE-2026-54886 MEDIUM EPSS 0% → fixed in 29.0.3 CVE-2026-48855 MEDIUM EPSS 0% → fixed in 29.0.2 CVE-2026-55737 HIGH EPSS 0% → fixed in 29.0.4 CVE-2026-28810 LOW EPSS 0% → fixed in 28.4.2 CVE-2026-53422 MEDIUM EPSS 0% → fixed in 29.0.3 CVE-2026-54887 MEDIUM EPSS 0% → fixed in 29.0.3 CVE-2026-48858 MEDIUM EPSS 0% → fixed in 29.0.2Other Erlang/OTP versions
Check another release line of Erlang/OTP.
Frequently asked
Is Erlang/OTP 25.3.2.21 patched?
Erlang/OTP 25.3.2.21 has 9 open critical-or-high vulnerabilities. The minimum safe version is 27.3.4.15 — upgrade to 27.3.4.15 or later to clear them.
What version should I upgrade Erlang/OTP 25.3.2.21 to?
Upgrade Erlang/OTP 25.3.2.21 to at least 27.3.4.15 to clear its 9 open critical-or-high vulnerabilities.
What is the latest version of Erlang/OTP?
The latest supported Erlang/OTP release is 29.1.2.
Is Erlang/OTP 25.3.2.21 still receiving security updates?
Yes — the 25.3 line is still supported and receiving security updates. The latest release is 29.1.2.
Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Erlang's official advisory before you patch or upgrade.