PT-2026-65067

Name of the Vulnerable Software and Affected Versions facil.io versions 0.7.5 through 0.7.6 Description A denial-of-service issue exists in the HTTP/1.1 chunked transfer encoding parser. An unauthenticated remote attacker can crash the server by sending a single POST request with a...

CVE-2026-59249 Sign-tolerant HTTP/1 chunk-size parser in Mint enables response smuggling against strict intermediaries on pooled connections

Inconsistent interpretation of HTTP requests HTTP response smuggling vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchronize a strict intermediary and the Mint client on the same pooled connection, enabling response-queue poisoning against subsequent requests that shar...