CVE-2026-48596

Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Request/Response Splitting' vulnerability in elixir-tesla tesla allows HTTP header injection via Tesla.Multipart.addcontenttypeparam/2. Tesla.Multipart.addcontenttypeparam/2 appends caller-supplied strings to the multipart...

CVE-2026-48596

creationtimestamp| type| source ---|---|--- 2026-06-02 21:34:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mndkdilowi2f 2026-07-10 02:35:12+00:00| published-proof-of-concept| https://github.com/elixir-tesla/tesla/security/advisories/GHSA-q7jx-v53g-848w 2026-07-10 02:42:38+00:00...

CVE-2026-48596

Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Request/Response Splitting' vulnerability in elixir-tesla tesla allows HTTP header injection via Tesla.Multipart.addcontenttypeparam/2. Tesla.Multipart.addcontenttypeparam/2 appends caller-supplied strings to the multipart...