CVE-2026-54894

Summary: CVE-2026-54894 describes an atom-table exhaustion denial of service in the Elixir Guardian library (Guardian.Plug.Keys) caused by unbounded calls to String.to_atom/1 when deriving keys from attacker-controlled input. What is affected: ueberauth guardian versions 0.1.0 through 2.4.0. The ...