Hex/mint CVE-2026-48861: low 2.1, EPSS 0.17%
mint has potential CRLF injection in its HTTP request line via unvalidated `method`/`target`
Action: Upgrade mint to 1.9.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.0 | - |
Fixed versions
| 1.9.0 |
Sources
- osv: GHSA-2pg6-44cx-c49v
- nvd: CVE-2026-48861
- https://github.com/elixir-mint/mint/security/advisories/GHSA-2pg6-44cx-c49v
- https://github.com/elixir-mint/mint/commit/fad091454cbb7449b19edb8e1fee12ca7cf28c3a
- https://cna.erlef.org/cves/CVE-2026-48861.html
- https://github.com/elixir-mint/mint
- https://osv.dev/vulnerability/EEF-CVE-2026-48861
CVE-2026-48861 · published · modified · JSON