CVE-2026-58229: Elixir Mint Unbounded Header Accumulation Memory-Exhaustion DoS

Vulnerability Overview CVE-2026-58229 Title: Unbounded HTTP/1 response-header and chunked-trailer accumulation in Mint causes memory-exhaustion DoS Description: An unbounded resource allocation vulnerability in allows a remote HTTP server to exhaust the memory of the client host, resulting in a denial of service. Specifically, the and functions in accumulate every parsed response header and chunked trailer field into a request list that persists across received TCP segments as . This list is only cleared upon receiving a terminating blank line. There is no limit on the number of headers or the total byte size; the underlying parser is invoked with an empty options list, meaning both per-line and per-packet size limits default to unlimited. A malicious HTTP server (directly accessible via attacker-controlled redirects, SSRF, or man-in-the-middle attacks) can stream complete header lines indefinitely (or, after a chunked body, complete trailer lines) without issuing a terminating blank line. Connection state grows indefinitely until the BEAM node is killed by the operating system's out-of-memory handler, causing the entire application using Mint to crash. CVSS 4.0 Score: 8.2 (HIGH) Weakness Type (CWE): CWE-770 — CWE-770 Allocation of Resources Without Limits or Throttling CAPEC: CAPEC-130 — CAPEC-130 Over-allocation of Resources Scope Affected Versions: mint from 0.1.0 to 1.9.2 Module: Mint.HTTP1 Source File: lib/mint/http1.ex Routines: Mint.HTTP1.decode_headers/5, Mint.HTTP1.decode_trailer_headers/4 Status: Affected Type: server Version: 0.1.0 Changes/Fixes: < 1.9.2 Remediation Fixed Version: < 1.9.2 Git Commit: 3e6de4bac4 Patch Link: 566d7826df References GitHub Security Advisory OSV Vulnerability Page GitHub Patch Contributors Discovered By: zx (Jace) Fixing Developer: Andrea Leopardi Fixing Reviewer: Eric Meadows-Jönsson Analyst: Jonatan Männchen / EEF

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-58229: Elixir Mint Unbounded Header Accumulation Memory-Exhaustion DoS

More from this source