Hex/oban_web CVE-2026-48592: medium 5.3, EPSS 0.50%
oban_web missing authorization check on `save-job` event handler
Action: Upgrade oban_web to 2.12.5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.12.0 | 2.12.5 | - |
Fixed versions
| 2.12.5 |
Sources
- osv: GHSA-389x-rgxr-8m33
- nvd: CVE-2026-48592
- https://github.com/oban-bg/oban_web/security/advisories/GHSA-389x-rgxr-8m33
- https://github.com/oban-bg/oban_web/commit/ab3c5d1d3eba06c62045f16f2cd7781c7752e248
- https://cna.erlef.org/cves/CVE-2026-48592.html
- https://github.com/oban-bg/oban_web
- https://osv.dev/vulnerability/EEF-CVE-2026-48592
CVE-2026-48592 · published · modified · JSON