| CVE-2026-48598 |
unknown |
— |
— |
|
|
|
2d ago |
Improper Encoding or Escaping of Output vulnerability in elixir-tesla tesla allows multipart part header injection via unescaped Content-Disposition parameter values.
Tesla.Multipart.part_headers_fo… |
| CVE-2026-48597 |
unknown |
— |
— |
|
|
|
2d ago |
Allocation of Resources Without Limits or Throttling vulnerability in elixir-tesla tesla allows denial of service via atom table exhaustion in Tesla.Adapter.Mint.
Tesla.Adapter.Mint.open_conn/2 conv… |
| CVE-2026-48596 |
unknown |
— |
— |
|
|
|
2d ago |
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in elixir-tesla tesla allows HTTP header injection via Tesla.Multipart.add_content_type_par… |
| CVE-2026-48595 |
unknown |
— |
— |
|
|
|
2d ago |
Improper Handling of Case Sensitivity vulnerability in elixir-tesla tesla allows credential leakage to a third-party origin on cross-origin redirects.
Tesla.Middleware.FollowRedirects strips securit… |
| CVE-2026-48594 |
unknown |
— |
— |
|
|
|
2d ago |
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-tesla tesla allows a denial of service via decompression bomb in HTTP response bodies.
When Tesla.Middleware.… |
