mpp vulnerable to Gas Draining with low gas limit

Vulnerability When the server acts as the fee payer, mpp Elixir 0.4.0 ZenHive/mpp does not validate whether the gaslimit set by the client is enough before broadcasting. A malicious client can drain the server's gas without paying. A transferWithMemo call on Tempo Moderato testnet requires 51,299...

mpp vulnerable to Gas Draining with access list

Details When the server acts as the feepayer, mpp Elixir 0.4.0 copies the client-supplied EIP-2930 access list verbatim into the cosigned fee-payer transaction. In cosignfeepayer, the server re-signs the raw basefields index 5 of the 0x76 AASigned envelope without inspecting the access list field...

mpp vulnerable to Gas Draining with no limit

Details When the server acts as the feepayer, the mpp Elixir 0.4.0 does not validate gaslimit, maxfeepergas and maxpriorityfeepergas before cosigning the client's fee-payer transaction. A malicious client embeds arbitrarily large maxfeepergas and maxpriorityfeepergas values in the signed envelope...

sobelow

Sobelow Sobelow 是一款针对 Elixir 和 Phoenix 框架的安全静态分析工具。对于安全研究人员来说，它有助于快速查看关注点。对于项目维护者，它可以用于防止引入多种常见漏洞。 目前，Sobelow 能检测以下安全问题的部分类型： 不安全配置 已知漏洞依赖 跨站脚本 SQL 注入 命令注入 代码执行 拒绝服务 目录遍历 不安全序列化 潜在漏洞以不同颜色标记，代表对不安全性的置信度。高置信度为红色，中置信度为黄色，低置信度为绿色。 通常，如果看起来某个函数可能被不安全地使用，但无法可靠判断该函数是否接受用户输入，则将其标记为“低置信度”。即：如果发现项标记为绿色，它 可...

CVE-2026-87119

CVE-2026-87119 is an authentication bypass by capture-replay in ZenHive mpp (Elixir), affecting versions 0.14.0 through 0.16.1 . The root cause lies in MPP.Methods.Tempo.KeyAuthorization.verify/3: the payer signs a Tempo KeyAuthorization over the chain id, key type, key id, expiry, limits, and sc...

CVE-2026-82672

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchronize a strict intermediary and the Mint client on a pooled connection, enabling response-queue poisoning against subsequent requests that...

CVE-2026-82672 Unvalidated chunk-size line tail in Mint HTTP/1 client enables response smuggling against strict intermediaries on pooled connections

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchronize a strict intermediary and the Mint client on a pooled connection, enabling response-queue poisoning against subsequent requests that...

CVE-2026-82672

CVE-2026-82672 is an HTTP Request/Response Smuggling vulnerability in the Elixir mint HTTP/1 client library (versions 0.1.0 through before 1.10.1). The root cause lies in Mint.HTTP1.Parse.chunk_size/1, which stops parsing a chunked response's chunk-size line at the first non-hexadecimal byte and ...

EUVD-2026-83608

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchronize a strict intermediary and the Mint client on a pooled connection, enabling response-queue poisoning against subsequent requests that...

CVE-2026-82672 Unvalidated chunk-size line tail in Mint HTTP/1 client enables response smuggling against strict intermediaries on pooled connections

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchronize a strict intermediary and the Mint client on a pooled connection, enabling response-queue poisoning against subsequent requests that...

EEF-CVE-2026-82672 Unvalidated chunk-size line tail in Mint HTTP/1 client enables response smuggling against strict intermediaries on pooled connections

Summary Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchronize a strict intermediary and the Mint client on a pooled connection, enabling response-queue poisoning against subsequent request...

the-sanitizer-is-the-weapon-cve-2026-68749-cve-2026-68750-quadratic-dos-in-elixir-html-sanitize-ex

CVE-2026-68749 / CVE-2026-68750 — PoC Denegación de servicio cuadrática en htmlsanitizeex 1.5.3. La biblioteca existe para neutralizar HTML no confiable, pero dos rutas de código superlineales independientes permiten que una única solicitud manipulada sature un planificador BEAM durante segundos...

CVE-2026-82672: Inconsistent Interpretation of HTTP Requests

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchronize a strict intermediary and the Mint client on a pooled connection, enabling response-queue poisoning against subsequent requests that...

Linux Distros Unpatched Vulnerability : CVE-2026-54451

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Elixir protobuf is a pure Elixir implementation of Google Protobuf. From 0.8.0 until 0.16.1, services that decode attacker-controlled protobuf bytes with...

EUVD-2026-82579

Session Fixation vulnerability in team-alembic ashauthentication allows an attacker who can plant a session identifier in a victim's browser to hold an authenticated session once that victim signs in. AshAuthentication.Plug.Helpers.storeinsession/2 writes the authenticated subject into the existi...

CVE-2026-54451

A flaw was found in Elixir protobuf, a pure Elixir implementation of Google Protobuf. An attacker can craft protobuf messages with a self-referential or cyclic message type. When these messages are decoded by the Protobuf.Decoder component, specifically the valueforfield function, an unbounded...

CVE-2026-54451

Elixir protobuf is a pure Elixir implementation of Google Protobuf. From 0.8.0 until 0.16.1, services that decode attacker-controlled protobuf bytes with Protobuf.Decoder can be taken offline when the schema contains a self-referential or cyclic message type. In lib/protobuf/decoder.ex,...

CVE-2026-54451

Elixir protobuf is a pure Elixir implementation of Google Protobuf. From 0.8.0 until 0.16.1, services that decode attacker-controlled protobuf bytes with Protobuf.Decoder can be taken offline when the schema contains a self-referential or cyclic message type. In lib/protobuf/decoder.ex,...

UBUNTU-CVE-2026-54451

Elixir protobuf is a pure Elixir implementation of Google Protobuf. From 0.8.0 until 0.16.1, services that decode attacker-controlled protobuf bytes with Protobuf.Decoder can be taken offline when the schema contains a self-referential or cyclic message type. In lib/protobuf/decoder.ex,...

CVE-2026-54451 Elixir protobuf: Unbounded recursion depth in embedded-message decoding

Elixir protobuf is a pure Elixir implementation of Google Protobuf. From 0.8.0 until 0.16.1, services that decode attacker-controlled protobuf bytes with Protobuf.Decoder can be taken offline when the schema contains a self-referential or cyclic message type. In lib/protobuf/decoder.ex,...