https://github.com/erlang/otp/security/advisories/GHSA-622p-qfh6-c352 reports:
A remote attacker can trigger a denial of service through
TLS certificate handling. By sending a specially crafted
certificate chain with multiple certificate policies at each
level, the policy tree expands exponentially during validation,
growing as M^K nodes (where M is the number of policies per
certificate and K is the chain depth). This pins schedulers
and exhausts memory without any authentication. Any
application using SSL/TLS that validates certificate paths is
affected, as are direct calls to
public_key:pkix_path_validation/3.