All 5 CVE vulnerabilities found in tesla, with AI-generated Chinese analysis, references, and POCs.
Vendor: elixir-tesla
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-48596 | CRLF injection in Tesla.Multipart.add_content_type_param/2 allows HTTP header injection CWE-113 | 2.1 | Low | 2026-06-02 |
| CVE-2026-48594 | Decompression bomb in Tesla.Middleware.DecompressResponse and Tesla.Middleware.Compression CWE-409 | 8.2 | High | 2026-06-02 |
| CVE-2026-48595 | Authorization header leaks to third-party origin on cross-origin redirect in Tesla.Middleware.FollowRedirects CWE-178 | 8.2 | High | 2026-06-02 |
| CVE-2026-48597 | Atom table exhaustion via untrusted URL scheme in Tesla.Adapter.Mint CWE-770 | 8.2 | High | 2026-06-02 |
| CVE-2026-48598 | CRLF injection in Tesla.Multipart disposition parameters allows multipart part header injection CWE-116 | 2.1 | Low | 2026-06-02 |
All 5 known CVE vulnerabilities affecting tesla with full Chinese analysis, references, and POCs where available.