https://github.com/erlang/otp/security/advisories/GHSA-22cw-4ph4-6447 reports:
Erlang/OTP's TLS hostname verification implements a legacy
RFC 6125 fallback that checks the Subject CommonName when the
Subject Alternative Name (SAN) extension is absent, rather
than following RFC 9525 which requires validation to fail
without SAN. Combined with weak handling of X.509 Name
Constraints, this enables man-in-the-middle attacks when an
attacker controls a DNS-constrained sub-CA and can intercept
network traffic, allowing forgery of certificates for
unauthorized domains.