Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/01 12:14 a.m.22 views

Ash.Type.Module.cast_input/2 atom exhaustion via unchecked Module.concat allows BEAM VM crash

Summary Ash.Type.Module.castinput/2 unconditionally creates a new Erlang atom via Module.concatvalue for any user-supplied binary string that starts with "Elixir.", before verifying whether the referenced module exists. Because Erlang atoms are never garbage-collected and the BEAM atom table has ...

8.2CVSS6AI score0.00423EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder