CVE-2026-55733 Atom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creation

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.toatom/1. When encode/3 in...

CVE-2026-55733 Atom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creation

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.toatom/1. When encode/3 in...

CVE-2026-55733

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.toatom/1. When encode/3 in...

EEF-CVE-2026-55733 Atom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creation

Summary Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to\atom/1. When encode...

CVE-2026-55733

The CVE details a denial-of-service in ueberauth guardian via Guardian.Permissions.AtomEncoding: attacker-controlled binary input fed into encode/3 leads to String.to_atom/1 creating unlimited atoms, exhausting BEAM’s atom table (≈1,048,576 entries) and crashing the node. Affected versions: guard...

CVE-2026-54894 Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.toatom/1. basekey/1 in...

EEF-CVE-2026-54894 Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys

Summary Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to\atom/1...

CVE-2026-54894

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.toatom/1. basekey/1 in...

CVE-2026-54894

Summary: CVE-2026-54894 describes an atom-table exhaustion denial of service in the Elixir Guardian library (Guardian.Plug.Keys) caused by unbounded calls to String.to_atom/1 when deriving keys from attacker-controlled input. What is affected: ueberauth guardian versions 0.1.0 through 2.4.0. The ...

CVE-2026-54894 Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.toatom/1. basekey/1 in...

EUVD-2026-51915

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.toatom/1. basekey/1 in...

CVE-2026-54894 Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.toatom/1. basekey/1 in...

CVE-2026-16614

creationtimestamp| type| source ---|---|--- 2026-08-01 17:35:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzyxryvnf2i 2026-08-01 17:36:07+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzyyqr2ya22 2026-08-01 19:00:39+00:00| seen|...

CVE-2025-14469

creationtimestamp| type| source ---|---|--- 2026-08-01 17:07:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzxfsnjdi2x 2026-08-01 17:08:01+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzxgj4qb22b...

CVE-2026-14823

creationtimestamp| type| source ---|---|--- 2026-08-01 15:02:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzqfpqsbf2v 2026-08-01 15:14:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzr2yggdo2b 2026-08-01 15:14:43+00:00| seen|...

CVE-2026-13329

creationtimestamp| type| source ---|---|--- 2026-08-01 14:52:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzptphv2b25...

CVE-2026-14315

creationtimestamp| type| source ---|---|--- 2026-08-01 14:34:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzotoz37a2z 2026-08-01 14:34:35+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzou5dfd322 2026-08-01 14:34:36+00:00| seen|...

CVE-2026-64816

creationtimestamp| type| source ---|---|--- 2026-08-01 12:47:58+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mrziviwrx42c...

CVE-2026-16144

creationtimestamp| type| source ---|---|--- 2026-08-01 11:01:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzcwkxawn2n 2026-08-01 18:01:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms22fgopyh2v 2026-08-01 23:03:24+00:00| seen|...

CVE-2026-15964

creationtimestamp| type| source ---|---|--- 2026-08-01 10:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrzb7mhn4f2c 2026-08-01 11:00:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzcugznah2n 2026-08-01 18:35:23+00:00| seen|...