CVE-2026-55733 Atom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creation

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.toatom/1. When encode/3 in...

CVE-2026-55733

CVE-2026-55733 concerns Guardian permissions AtomEncoding: when encoding permission scopes, external binary inputs are passed to String.to_atom/1 without allow-list checks, causing unbounded atom creation. Each unseen binary mints a permanent BEAM atom; the atom table is finite (~1,048,576 entrie...

EUVD-2026-51916

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.toatom/1. When encode/3 in...