Packages

ezstd

1.2.5

1.2.5 1.2.4 1.2.3 1.2.2 1.2.1 1.2.0 1.1.0 1.0.9 1.0.8 1.0.7 1.0.6 1.0.5 1.0.4 1.0.3 1.0.2 1.0.1 1.0.0

zstd binding for erlang

HexDocs Report package

Current section

1 Advisory

Jump to

Documentation 17 Versions 0 Dependencies 17 Dependants 1 Advisory Files Activity

EEF-CVE-2026-119434 CVE-2026-119434

Decompression bomb in ezstd:decompress_using_ddict/2 allows BEAM memory exhaustion via unbounded output buffer

November 05, 2026

CVSS

6.9 / 10.0 Medium

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 1.0.5 and < 1.2.5

References

https://cna.erlef.org/cves/CVE-2026-119434.html
https://github.com/silviucpp/ezstd/commit/6730128b1d35eca02a2028671421471ff651f423
https://github.com/silviucpp/ezstd/commit/e34f4a4f6dc18d990d1cece2d5fceef8e934a195
https://github.com/silviucpp/ezstd/releases/tag/v1.2.5
https://hex.pm/packages/ezstd

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions

this version

5 243

yesterday

2 753

last 7 days

16 242

all time

639 090

Last Updated

Oct 22, 2026

License

MIT

Build Tools

rebar3

Publisher

silviu.cpp

Owners

silviu.cpp

Operator	Description	Example
name:	Match package name. Supports * wildcards and repo/package form	name:phx* or name:hexpm/phoenix
description:	Full-text search of package descriptions	description:auth
depends:	Packages depending on a given package. Supports repo:package form	depends:ecto or depends:hexpm:ecto
build_tool:	Filter by build tool	build_tool:mix
updated_after:	Packages updated after an ISO8601 datetime	updated_after:2025-01-01T00:00:00Z
extra:	Match custom metadata (key,value). Nested keys are separated by commas	extra:license,MIT

ezstd

Checksum

Dependency Config

Package Details

Links

Owners

Search filters