I'm assuming the most likely affected Elixir projects would be those using Nerves with SSH enabled and exposed to the public internet, as nerves_ssh wraps the OTP SSH daemon.
Don't think that's a very common thing to do, even in my hobby projects I would only access a Nerves device through a VPN.
This is also true of erlang right? This module is part of the stdlib but if you haven't implemented access using it it's "turned off" in the same way any other libraries you aren't using are.
Comments
most Elixir deployments are probably unaffected (obviously, please please check to be sure), as SSH is turned off by default.
https://paraxial.io/blog/erlang-ssh
I'm assuming the most likely affected Elixir projects would be those using Nerves with SSH enabled and exposed to the public internet, as nerves_ssh wraps the OTP SSH daemon.
Don't think that's a very common thing to do, even in my hobby projects I would only access a Nerves device through a VPN.
This is also true of erlang right? This module is part of the stdlib but if you haven't implemented access using it it's "turned off" in the same way any other libraries you aren't using are.