Import Erlang advisory in GitHub importer

[keshav-space]

Since the elixir_security.py relies on https://github.com/dependabot/elixir-security-advisories, which has been archived by GitHub, we will not be able to access the most recent HEX advisories.

Solution:

• Migrate elixir security importer #1060 #1061 keep it, but as a one-time importer
• Import Erlang advisory in GitHub importer (preferred)
  OR
• Import Hex advisory from OSV

Erlang ecosystem => package written either in Erlang, Elixir, LFE or Joxa => Hex is the package manager for Erlang ecosystem

Edit: mirego/elixir-security-advisories is the actively maintained fork of elixir-security-advisories

[AyanSinhaMahapatra]

Note that there is now a data stream at https://cna.erlef.org/cves/index.json for advisories as they are now a CNA https://cna.erlef.org, also note that this is collected in OSV too. See https://cna.erlef.org/cves/CVE-2026-21618.json for example, they also support packageURLs for the latest ones.

Thanks @maennchen for pointing this out.

[Shivaay26]

Hey , would love to work on this , would submit the pr soon