What’s Vulnerable › Products
elixir-mint mint vulnerabilities
14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.
Check whether your elixir-mint mint version is affected
Latest elixir-mint mint vulnerabilities
- CVE-2026-94194 — Mint HTTP/1 client applies chunked framing when chunked is not the final transfer coding, enabling response smuggling through intermediaries (CVSS 6.3)
- CVE-2026-92103 — Mint HTTP/2 client buffers oversized frames up to 16 MiB before enforcing max_frame_size (CVSS 6.3)
- CVE-2026-91043 — HPACK-indexed cookie fields in Mint HTTP/2 responses bypass max_header_list_size and exhaust client memory (CVSS 8.2)
- CVE-2026-82672 — Unvalidated chunk-size line tail in Mint HTTP/1 client enables response smuggling against strict intermediaries on pooled connections (CVSS 6.3)
- CVE-2026-82729 — Quadratic chunk-size parsing in Mint.HTTP1.Parse allows CPU-exhaustion DoS (CVSS 6.3)
- CVE-2026-82728 — Unbounded HTTP/1 status-line and chunk-extension buffering in Mint causes memory-exhaustion DoS (CVSS 8.2)
- CVE-2026-59249 — Sign-tolerant HTTP/1 chunk-size parser in Mint enables response smuggling against strict intermediaries on pooled connections (CVSS 6.3)
- CVE-2026-59246 — Zero-length HTTP/2 CONTINUATION frames bypass Mint's header-block byte-size cap and exhaust client memory (CVSS 6.3)
- CVE-2026-58229 — Unbounded HTTP/1 response-header and chunked-trailer accumulation in Mint causes memory-exhaustion DoS (CVSS 8.2)
- CVE-2026-56810 — mint buffers an entire chunked response chunk in memory in Mint.HTTP1.decode_body/5 (CVSS 8.7)
- CVE-2026-49754 — HTTP/2 CONTINUATION flood in Mint client via unbounded header-block accumulation (CVSS 8.2)
- CVE-2026-49753 — HTTP response smuggling in Mint HTTP/1 client via lenient Content-Length parsing (CVSS 6.3)
- CVE-2026-48862 — Unbounded conn.streams growth in Mint HTTP/2 client via unenforced PUSH_PROMISE concurrency (CVSS 8.2)
- CVE-2026-48861 — CRLF injection in HTTP/1 request line via unvalidated method in Mint (CVSS 2.1)