CVE-2026-59246

creationtimestamp| type| source ---|---|--- 2026-07-14 12:01:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm5vzj3ce24 2026-07-20 05:46:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2lqpopwi2z 2026-07-20 05:46:47+00:00| seen|...

CVE-2026-59246 Zero-length HTTP/2 CONTINUATION frames bypass Mint's header-block byte-size cap and exhaust client memory

Allocation of resources without limits vulnerability in elixir-mint mint allows a remote HTTP/2 server to exhaust memory on the client host and cause a denial of service. The Mint.HTTP2.handlecontinuation/3 function in lib/mint/http2.ex accumulates the header-block fragment carried by each HTTP/2...