swoosh has email-derived URL path injection in Microsoft Graph endpoint

CVE-2026-54893

### Summary `Swoosh.Adapters.MsGraph` builds its Microsoft Graph API request URL by interpolating the sender's email ad

历史摘要 · 未重新核验 · GitHub Advisory

mpp vulnerable to Gas Draining with low gas limit

## Vulnerability When the server acts as the fee payer, `mpp` Elixir 0.4.0 (ZenHive/mpp) does not validate whether the `

历史摘要 · 未重新核验 · GitHub Advisory

mpp vulnerable to Gas Draining with access list

### Details When the server acts as the fee_payer, `mpp` Elixir 0.4.0 copies the client-supplied EIP-2930 access list ve

历史摘要 · 未重新核验 · GitHub Advisory

mpp vulnerable to Gas Draining with no limit

### Details When the server acts as the fee_payer, the `mpp` Elixir 0.4.0 does not validate `gas_limit`, `max_fee_per_ga

历史摘要 · 未重新核验 · GitHub Advisory

Ash: Private action arguments can be set by user input via string-keyed params and atomic changesets

CVE-2026-55736

### Summary Ash fails to consistently strip private action arguments (those declared with `public?: false`) when a chan

历史摘要 · 未重新核验 · GitHub Advisory

Phoenix: Unbounded channel joins per transport enables DoS over few connections

CVE-2026-56811

### Summary Phoenix transports do not limit the number of channels in a given connection, making it easy to spawn hundr

历史摘要 · 未重新核验 · GitHub Advisory

Phoenix: Presence keys colliding with `Object.prototype` members break existence checks

CVE-2026-56812

### Summary The Phoenix JavaScript presence client (`assets/js/phoenix/presence.js`) tests whether a presence already e

历史摘要 · 未重新核验 · GitHub Advisory

AshAuthentication vulnerable to OAuth2/OIDC account takeover via email-based user matching

CVE-2026-49757

### Summary AshAuthentication's OAuth2 and OIDC family strategies matched the local user by email address rather than b

历史摘要 · 未重新核验 · GitHub Advisory

gRPC Erlang package has unbounded gzip decompression (decompression bomb)

CVE-2026-53430

### Summary An unauthenticated remote peer can crash any gRPC server built on this library by sending a small gzip-compr

历史摘要 · 未重新核验 · GitHub Advisory

gRPC Erlang package has unbounded request body accumulation in `read_full_body/3`

CVE-2026-48854

### Summary `'Elixir.GRPC.Server.Adapters.Cowboy.Handler':read_full_body/3` accumulates every received chunk into a sin

历史摘要 · 未重新核验 · GitHub Advisory

gRPC Erlang package's path bindings are overridable by query string and request body

CVE-2026-48599

### Summary In the HTTP-to-gRPC transcoding layer of the `grpc` Hex package, query-string and request-body parameters c

历史摘要 · 未重新核验 · GitHub Advisory

gRPC Erlang package vulnerable to Remote Code Execution with attacker-controlled gRPC payloads

CVE-2026-48853

### Summary `GRPC.Codec.Erlpack.decode/2` calls `:erlang.binary_to_term/1` directly on the raw gRPC message body withou

历史摘要 · 未重新核验 · GitHub Advisory

membrane_mp4_plugin has an unauthenticated denial-of-service via BEAM atom table exhaustion

CVE-2026-53423

### Summary `membrane_mp4_plugin` interns every 4-byte MP4 box name as a BEAM atom while parsing container headers, wit

历史摘要 · 未重新核验 · GitHub Advisory

Req vulnerable to multipart form-data header injection via unescaped name/filename/content_type

CVE-2026-49756

### Summary Req's multipart form encoder interpolates the per-part `name`, `filename`, and `content_type` directly into

历史摘要 · 未重新核验 · GitHub Advisory

Req vulnerable to unbounded archive/compression extraction triggered by response content-type

CVE-2026-49755

### Summary Req's default response pipeline auto-decodes archive and compressed bodies based on the server-supplied `co

历史摘要 · 未重新核验 · GitHub Advisory

Protobuf: Unbounded recursion depth in embedded-message decoding

CVE-2026-54451

### Summary Unbounded recursion depth in `Protobuf.Decoder` (Hex package `protobuf`, versions `>= 0.8.0, >` (tag `0x0A`

历史摘要 · 未重新核验 · GitHub Advisory

Tesla vulnerable to multipart part smuggling via unescaped `content-disposition` values

CVE-2026-48598

### Summary `Tesla.Multipart.part_headers_for_disposition/1` interpolates `Content-Disposition` parameter values (field

历史摘要 · 未重新核验 · GitHub Advisory

Tesla vulnerable to atom exhaustion via untrusted URL scheme

CVE-2026-48597

### Summary In the Mint adapter for the Tesla HTTP client library, `Tesla.Adapter.Mint.open_conn/2` passes the URL sche

历史摘要 · 未重新核验 · GitHub Advisory

Tesla: Authorization header leaks on cross-origin redirect via case-sensitive filtering

CVE-2026-48595

### Summary `Tesla.Middleware.FollowRedirects` is meant to strip the `Authorization` header when following a cross-orig

历史摘要 · 未重新核验 · GitHub Advisory

Tesla has decompression bomb on response body

CVE-2026-48594

### Summary Any Tesla client pipeline that includes `Tesla.Middleware.DecompressResponse` or `Tesla.Middleware.Compress

历史摘要 · 未重新核验 · GitHub Advisory