Hi, I submitted a salsa MR to fix this CVE in unstable here: https://salsa.debian.org/erlang-team/packages/erlang/-/merge_requests/12 Once it is fixed in unstable I can work on the backport of the fix while it migrates to testing. Let me know if you want to do that by yourself Sergei. Cheers! Lucas Kanashiro