PhoenixStorybook: Unbounded atom creation from LiveView event params (atom-table DoS)
CVE-2026-8469
### Summary An attacker who can deliver `psb-assign`, `psb-toggle`, `psb-set-theme`, `upper-tab-navigation`, `lower-tab-
#erlang
共收录 52 条相关情报。
← 返回所有主题PhoenixStorybook: Unauthenticated remote code execution via HEEx template injection in phoenix_storybook playground
CVE-2026-8467
### Summary An unsafe HEEx template generation vulnerability allows any unauthenticated user to execute arbitrary code o
Plug: Unbounded buffer accumulation in multipart header parsing causes denial of service
CVE-2026-8468
### Summary An Allocation of Resources Without Limits or Throttling vulnerability in `Plug.Conn.read_part_headers/2` al
Postgrex: Channel-name SQL injection in `Postgrex.Notifications.listen/3`
CVE-2026-32687
### Summary SQL injection in `Postgrex.Notifications.listen/3`: the `channel` argument is interpolated straight into `L
Decimal: Unbounded exponent in `Decimal.new` enables unauthenticated DoS
CVE-2026-32686
Summary `decimal` doesn't bound the exponent on parsed input, so something like `"1e10000000"` is parsed fine but then e
Phoenix: Long-poll NDJSON body splitting causes large memory allocation
CVE-2026-32689
### Summary An unauthenticated denial-of-service vulnerability in Phoenix's long-poll transport allows a remote client
Bandit HTTP/2 Frame Size Limit Bypass via Late Buffer Check Enables Memory Exhaustion
CVE-2026-42788
### Summary Bandit's HTTP/2 parser checks frame size *after* it has already buffered the full body, instead of when it
Bandit trusts client-supplied URI scheme on plaintext connections
CVE-2026-39807
### Summary Bandit reflects the client-supplied URI scheme into `conn.scheme` without verifying the actual transport. Ov
Bandit is vulnerable to CL.CL request smuggling via unrejected duplicate `Content-Length` header
CVE-2026-39805
### Summary Bandit is vulnerable to CL.CL HTTP request smuggling: it silently accepts requests with two `Content-Length
Bandit Buffers Unbounded WebSocket Continuation Frames, Allowing Unauthenticated Memory Exhaustion
CVE-2026-42786
### Summary A single unauthenticated WebSocket client can exhaust server memory in any Bandit-fronted application that a
Bandit's unbounded WebSocket inflate causes BEAM OOM with a single frame
CVE-2026-39804
### Summary When a Bandit-fronted server has explicitly enabled WebSocket permessage-deflate (`compress: true`), an una
Plug.Cowboy vulnerable to unauthenticated remote DoS via HTTP/2 `:scheme` atom-table exhaustion
CVE-2026-32688
## Summary An unauthenticated remote denial-of-service vulnerability in `Plug.Cowboy.Conn` allows any attacker who can