Maintaining the CVE Numbering Authority for the Erlang Ecosystem Foundation

⚠️ Note: This project is currently under construction and is not yet active. ⚠️

The Erlang Ecosystem Foundation CNA is a collaborative effort to assign and maintain CVE identifiers within the ecosystem, providing a consistent and transparent process for reporting, documenting, and mitigating security vulnerabilities.

As a CNA (CVE Numbering Authority), this initiative encompasses Erlang, Erlang Ecosystem Foundation, Elixir, Gleam, Hex.pm, and Hex.pm packages hosted by the Erlang Ecosystem Foundation’s Security Working Group.

By following the globally recognized CVE standard, this joint venture ensures a unified approach to identifying and addressing security issues across these communities.

• Security Policy
• CNA Scope
• Contact
• Issued CVE's

• Basic Membership: Attend meetings, join our Slack workspace, submit news tips.
• Annual Supporting Membership: All basic benefits plus voting rights, optional erlef.org email.
• Lifetime Supporting Membership: All annual benefits at a reduced one-time fee.

Learn More and Join

Your donation supports the development of technologies and open-source projects used daily by engineers worldwide. Sponsors receive acknowledgment with their logo and link on our website and communications.

Become a Sponsor