ericmj CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM ericmj CVE published 2026-05-07

CVE-2026-32686

CVE-2026-32686 is an Uncontrolled Resource Consumption vulnerability in the ericmj decimal library, which can lead to a Denial of Service (DoS) attack. The library does not bound the exponent on parsed input, allowing an attacker to store a decimal with a very large exponent, which can exhaust available memory and crash the BEAM VM. Any application that accepts user-supplied decimal input and subsequently [truncated]