Hex/mint CVE-2026-48861: low 2.1, EPSS 0.17%
CRLF injection in HTTP/1 request line via unvalidated method in Mint
Action: Upgrade mint to 1.9.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.1.0 | 1.9.0 | - |
Fixed versions
| 1.9.0 |
Sources
- osv: EEF-CVE-2026-48861
- nvd: CVE-2026-48861
- https://github.com/elixir-mint/mint/security/advisories/GHSA-2pg6-44cx-c49v
- https://cna.erlef.org/cves/CVE-2026-48861.html
- https://github.com/elixir-mint/mint/commit/fad091454cbb7449b19edb8e1fee12ca7cf28c3a
- https://hex.pm/packages/mint
CVE-2026-48861 · published · modified · JSON