CVE-2026-48598 CRLF injection in Tesla.Multipart disposition parameters allows multipart part header injection

[
  {
    "collectionURL": "https://repo.hex.pm",
    "cpes": [
      "cpe:2.3:a:elixir-tesla:tesla:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "modules": [
      "'Elixir.Tesla.Multipart'"
    ],
    "packageName": "tesla",
    "packageURL": "pkg:hex/tesla",
    "product": "tesla",
    "programFiles": [
      "lib/tesla/multipart.ex"
    ],
    "programRoutines": [
      {
        "name": "'Elixir.Tesla.Multipart':part_headers_for_disposition/1"
      },
      {
        "name": "'Elixir.Tesla.Multipart':add_field/4"
      },
      {
        "name": "'Elixir.Tesla.Multipart':add_file/3"
      },
      {
        "name": "'Elixir.Tesla.Multipart':add_file_content/4"
      }
    ],
    "repo": "https://github.com/elixir-tesla/tesla",
    "vendor": "elixir-tesla",
    "versions": [
      {
        "lessThan": "1.18.3",
        "status": "affected",
        "version": "0.8.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "collectionURL": "https://github.com",
    "cpes": [
      "cpe:2.3:a:elixir-tesla:tesla:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "modules": [
      "'Elixir.Tesla.Multipart'"
    ],
    "packageName": "elixir-tesla/tesla",
    "packageURL": "pkg:github/elixir-tesla/tesla",
    "product": "tesla",
    "programFiles": [
      "lib/tesla/multipart.ex"
    ],
    "programRoutines": [
      {
        "name": "'Elixir.Tesla.Multipart':part_headers_for_disposition/1"
      },
      {
        "name": "'Elixir.Tesla.Multipart':add_field/4"
      },
      {
        "name": "'Elixir.Tesla.Multipart':add_file/3"
      },
      {
        "name": "'Elixir.Tesla.Multipart':add_file_content/4"
      }
    ],
    "repo": "https://github.com/elixir-tesla/tesla.git",
    "vendor": "elixir-tesla",
    "versions": [
      {
        "lessThan": "bb1a2c3da2775924d96e3db8e315dcc4d5d2246e",
        "status": "affected",
        "version": "6ebfdb9abe9c6f119408045b933d82462decd351",
        "versionType": "git"
      }
    ]
  }
]