Maintaining the CVE Numbering Authority for the Erlang Ecosystem Foundation

The Erlang Ecosystem Foundation CNA is a collaborative effort to assign and maintain CVE identifiers within the ecosystem, providing a consistent and transparent process for reporting, documenting, and mitigating security vulnerabilities.

As a CNA (CVE Numbering Authority), this initiative encompasses Erlang, Erlang Ecosystem Foundation, Elixir, Gleam, Hex.pm, @nerves-hub, @nerves-project, @OpenRiak, and Hex.pm packages hosted by the Erlang Ecosystem Foundation’s Security Working Group.

By following the globally recognized CVE standard, this joint venture ensures a unified approach to identifying and addressing security issues across these communities.

• Security Policy
• CNA Scope
• Contact
• Issued CVE's

• Basic Membership: Attend meetings, join our Slack workspace, submit news tips.
• Annual Supporting Membership: All basic benefits plus voting rights, optional erlef.org email.
• Lifetime Supporting Membership: All annual benefits at a reduced one-time fee.

Learn More and Join

Your donation supports the development of technologies and open-source projects used daily by engineers worldwide. Sponsors receive acknowledgment with their logo and link on our website and communications.

Become a Sponsor