Current section

2 Advisories

Jump to
EEF-CVE-2026-49755 CVE-2026-49755 GHSA-655f-mp8p-96gv

Decompression bomb DoS in Req via auto-decoded archive and compressed response bodies

June 08, 2026
CVSS
?
8.2 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 0.1.0 and < 0.6.1
EEF-CVE-2026-49756 CVE-2026-49756 GHSA-px9f-whj3-246m

Multipart form-data header injection in Req via unescaped name/filename/content_type

June 08, 2026
CVSS
?
2.1 / 10.0 Low
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N

Affected Versions

>= 0.5.3 and < 0.6.0

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions
0 10K 20K 30K 40K

this version

0

yesterday

13 490

last 7 days

197 947

all time

13 030 603

Last Updated

Jun 08, 2026

License

Apache-2.0

Build Tools

mix

Publisher

wojtekmach wojtekmach