Hex/oban_web CVE-2026-48593: medium 5.9, EPSS 0.42%
Unbounded range expansion in cron describe causes memory exhaustion in oban_web
Action: Upgrade oban_web to 2.12.5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.12.0 | 2.12.5 | - |
Fixed versions
| 2.12.5 |
Sources
- osv: EEF-CVE-2026-48593
- nvd: CVE-2026-48593
- https://github.com/oban-bg/oban_web/security/advisories/GHSA-6xh2-93p9-vqh4
- https://cna.erlef.org/cves/CVE-2026-48593.html
- https://github.com/oban-bg/oban_web/commit/9998b7e284e02fdd4645dd6231760038e63b584d
- https://hex.pm/packages/oban_web
CVE-2026-48593 · published · modified · JSON