Current section

5 Advisories

Jump to
EEF-CVE-2026-48596 CVE-2026-48596 GHSA-q7jx-v53g-848w

CRLF injection in Tesla.Multipart.add_content_type_param/2 allows HTTP header injection

June 02, 2026
CVSS
?
2.1 / 10.0 Low
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N

Affected Versions

>= 0.8.0 and < 1.18.3
EEF-CVE-2026-48594 CVE-2026-48594 GHSA-mc85-72gr-vm9f

Decompression bomb in Tesla.Middleware.DecompressResponse and Tesla.Middleware.Compression

June 02, 2026
CVSS
?
8.2 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 0.6.0 and < 1.18.3
EEF-CVE-2026-48595 CVE-2026-48595 GHSA-9m9w-gxf7-rh8m

Authorization header leaks to third-party origin on cross-origin redirect in Tesla.Middleware.FollowRedirects

June 02, 2026
CVSS
?
8.2 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Versions

>= 1.4.0 and < 1.18.3
EEF-CVE-2026-48597 CVE-2026-48597 GHSA-h74c-q9j7-mpcm

Atom table exhaustion via untrusted URL scheme in Tesla.Adapter.Mint

June 02, 2026
CVSS
?
8.2 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 1.3.0 and < 1.18.3
EEF-CVE-2026-48598 CVE-2026-48598 GHSA-28jh-g32x-v9v4

CRLF injection in Tesla.Multipart disposition parameters allows multipart part header injection

June 02, 2026
CVSS
?
2.1 / 10.0 Low
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N

Affected Versions

>= 0.8.0 and < 1.18.3

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions
0 10K 20K 30K 40K

this version

0

yesterday

23 088

last 7 days

143 093

all time

71 652 291

Last Updated

Jun 02, 2026

License

MIT

Build Tools

mix

Publisher

alchemist_ubi alchemist_ubi