Hex/mint CVE-2026-48862: high 8.2, EPSS 0.38%
Unbounded conn.streams growth in Mint HTTP/2 client via unenforced PUSH_PROMISE concurrency
Action: Upgrade mint to 1.9.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.2.0 | 1.9.0 | - |
Fixed versions
| 1.9.0 |
Sources
- osv: EEF-CVE-2026-48862
- nvd: CVE-2026-48862
- https://github.com/elixir-mint/mint/security/advisories/GHSA-g586-ccqf-7x4r
- https://cna.erlef.org/cves/CVE-2026-48862.html
- https://github.com/elixir-mint/mint/commit/70b97b6a5209fb288b0e04d8e657dda26c59de67
- https://hex.pm/packages/mint
CVE-2026-48862 · published · modified · JSON