Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

elixir-mint — Vulnerabilities & Security Advisories 15

Browse all 15 CVE security advisories affecting elixir-mint. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates security vulnerability data for the Elixir Mint library, focusing on software weaknesses tagged within the Elixir ecosystem. The collection encompasses a wide range of reported issues, including improper input validation, denial of service vectors, and information disclosure flaws, covering the entire development history from the project's inception to the most recent releases. Readers can utilize this resource to track official vendor advisories, understand the prevalence and impact of specific weakness classes affecting HTTP client implementations, or look up the complete vulnerability history of the Mint product to assess risk exposure. The data is compiled from multiple authoritative sources to provide a consolidated view of security trends, enabling security professionals and developers to make informed decisions regarding patching and mitigation strategies. By centralizing these records, the page facilitates efficient analysis of recurring patterns in the library's codebase without requiring cross-referencing of disparate databases. This comprehensive overview supports proactive security management by highlighting historical incidents that may inform future development practices or runtime hardening efforts for applications dependent on this critical networking component.

Found 14 results / 15 Clear Filters
Top products by elixir-mint: mint hpax
CVE ID Title CVSS Severity Published
CVE-2026-94194 Mint HTTP/1 client applies chunked framing when chunked is not the final transfer coding, enabling response smuggling through intermediaries — mint CWE-444 6.3 Medium 2026-09-28
CVE-2026-92103 Mint HTTP/2 client buffers oversized frames up to 16 MiB before enforcing max_frame_size — mint CWE-770 6.3 Medium 2026-09-28
CVE-2026-91043 HPACK-indexed cookie fields in Mint HTTP/2 responses bypass max_header_list_size and exhaust client memory — mint CWE-770 8.2 High 2026-09-28
CVE-2026-82672 Unvalidated chunk-size line tail in Mint HTTP/1 client enables response smuggling against strict intermediaries on pooled connections — mint CWE-444 6.3 Medium 2026-09-19
CVE-2026-82728 Unbounded HTTP/1 status-line and chunk-extension buffering in Mint causes memory-exhaustion DoS — mint CWE-770 8.2 High 2026-09-04
CVE-2026-82729 Quadratic chunk-size parsing in Mint.HTTP1.Parse allows CPU-exhaustion DoS — mint CWE-407 6.3 Medium 2026-09-04
CVE-2026-59249 Sign-tolerant HTTP/1 chunk-size parser in Mint enables response smuggling against strict intermediaries on pooled connections — mint CWE-444 - - 2026-07-16
CVE-2026-59246 Zero-length HTTP/2 CONTINUATION frames bypass Mint's header-block byte-size cap and exhaust client memory — mint CWE-770 - - 2026-07-14
CVE-2026-58229 Unbounded HTTP/1 response-header and chunked-trailer accumulation in Mint causes memory-exhaustion DoS — mint CWE-770 - - 2026-07-14
CVE-2026-56810 mint buffers an entire chunked response chunk in memory in Mint.HTTP1.decode_body/5 — mint CWE-770 - - 2026-07-06
CVE-2026-49753 HTTP response smuggling in Mint HTTP/1 client via lenient Content-Length parsing — mint CWE-444 - - 2026-06-02
CVE-2026-49754 HTTP/2 CONTINUATION flood in Mint client via unbounded header-block accumulation — mint CWE-770 - - 2026-06-02
CVE-2026-48862 Unbounded conn.streams growth in Mint HTTP/2 client via unenforced PUSH_PROMISE concurrency — mint CWE-770 - - 2026-06-02
CVE-2026-48861 CRLF injection in HTTP/1 request line via unvalidated method in Mint — mint CWE-93 - - 2026-06-02

This page lists every published CVE security advisory associated with elixir-mint. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.