Browse Security Advisories
Security Advisories for https://github.com/elixir-mint/mint from erlef Clear Filters
Medium
about 1 month ago
Sign-tolerant HTTP/1 chunk-size parser in Mint enables response smuggling against strict intermediaries on pooled connections
hex
mint
Medium
about 1 month ago
Zero-length HTTP/2 CONTINUATION frames bypass Mint's header-block byte-size cap and exhaust client memory
hex
mint
High
about 1 month ago
Unbounded HTTP/1 response-header and chunked-trailer accumulation in Mint causes memory-exhaustion DoS
hex
mint
High
about 2 months ago
mint buffers an entire chunked response chunk in memory in Mint.HTTP1.decode_body/5
hex
mint
Medium
3 months ago
HTTP response smuggling in Mint HTTP/1 client via lenient Content-Length parsing
hex
mint
High
3 months ago
HTTP/2 CONTINUATION flood in Mint client via unbounded header-block accumulation
hex
mint
High
3 months ago
Unbounded conn.streams growth in Mint HTTP/2 client via unenforced PUSH_PROMISE concurrency
hex
mint
Filter by Severity
Filter by Source
CPAN Security Advisory Database
1,068
Erlang Ecosystem Foundation
180
GitHub Advisory Database
34,649
Filter by Ecosystem
Filter by Package
bandit
10
hackney
10
mint
8
mpp
7
ash
7
cowlib
7
mdex
6
html_sanitize_ex
6
tesla
5
livebook
5
grpc
4
plug
4
mdex_native
4
guardian
4
phoenix
3
phoenix_storybook
3
boruta
3
gun
3
postgrex
3
wisp
2
cowboy
2
samly
2
req
2
phoenix_live_view
2
oidcc_plug
2
oban_web
2
absinthe
2
membrane_mp4_plugin
1
ueberauth_apple
1
plug_cowboy
1
earmark
1
ex_aws_sns
1
phoenix
1
ash_authentication_phoenix
1
ash_authentication
1
swoosh
1
hpax
1
ymlr
1
decimal
1
absinthe_plug
1
oaskit
1
hex_core
1
absinthe_federation
1
Filter by Repository
https://github.com/erlang/otp
37
https://github.com/mtrudel/bandit
10
https://github.com/benoitc/hackney
10
https://github.com/elixir-mint/mint
8
https://github.com/ZenHive/mpp
7
https://github.com/ash-project/ash
7
https://github.com/rrrene/html_sanitize_ex
6
https://github.com/gleam-lang/gleam
5
https://github.com/ninenines/cowlib
5
https://github.com/livebook-dev/livebook
5
https://github.com/hexpm/hexpm
5
https://github.com/elixir-tesla/tesla
5
https://github.com/ueberauth/guardian
4
https://github.com/leandrocp/mdex_native
4
https://github.com/elixir-grpc/grpc
4
https://github.com/elixir-plug/plug
4
https://github.com/phoenixframework/phoenix
3
https://github.com/ninenines/cowboy
3
https://github.com/phenixdigital/phoenix_storybook
3
https://github.com/ninenines/gun
3
https://github.com/malach-it/boruta_auth
3
https://github.com/elixir-ecto/ecto
3
https://github.com/erlef/oidcc_plug
2
https://github.com/phoenixframework/phoenix_live_view
2
https://github.com/absinthe-graphql/absinthe
2
https://github.com/leandrocp/mdex
2
https://github.com/wojtekmach/req
2
https://github.com/oban-bg/oban_web
2
https://github.com/gleam-wisp/wisp
2
https://github.com/Jump-App/esaml
1
https://github.com/ericmj/decimal
1
https://github.com/ueberauth/ueberauth_apple
1
https://github.com/team-alembic/ash_authentication_phoenix
1
https://github.com/membraneframework/membrane_mp4_plugin
1
https://github.com/ufirstgroup/ymlr
1
https://github.com/nerves-hub/nerves_hub_web
1
https://github.com/hexpm/hex
1
https://github.com/hexpm/hex_core
1
https://github.com/elixir-lang/elixir
1
https://github.com/elixir-plug/plug_cowboy
1
https://github.com/erlef/cowlib
1
https://github.com/swoosh/swoosh
1
https://github.com/lud/oaskit
1
https://github.com/elixir-mint/hpax
1
https://github.com/ex-aws/ex_aws_sns
1
https://github.com/team-alembic/ash_authentication
1
https://github.com/DivvyPayHQ/absinthe_federation
1
https://github.com/absinthe-graphql/absinthe_plug
1