Hex/membrane_mp4_plugin CVE-2026-53423: medium 5.9, EPSS 0.26%
Unauthenticated denial-of-service via BEAM atom table exhaustion in membrane_mp4_plugin
Action: Upgrade membrane_mp4_plugin to 0.36.7 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.3.0 | 0.36.7 | - |
Fixed versions
| 0.36.7 |
Sources
- osv: EEF-CVE-2026-53423
- nvd: CVE-2026-53423
- https://github.com/membraneframework/membrane_mp4_plugin/security/advisories/GHSA-43hj-fxwj-49qw
- https://cna.erlef.org/cves/CVE-2026-53423.html
- https://github.com/membraneframework/membrane_mp4_plugin/commit/56373d1ddc86968e55fbde795c14eeba24357b57
- https://hex.pm/packages/membrane_mp4_plugin
CVE-2026-53423 · published · modified · JSON