Hex/membrane_mp4_plugin CVE-2026-53423: medium 5.9, EPSS 0.26%
membrane_mp4_plugin has an unauthenticated denial-of-service via BEAM atom table exhaustion
Action: Upgrade membrane_mp4_plugin to 0.36.7 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.36.7 | - |
Fixed versions
| 0.36.7 |
Sources
- osv: GHSA-43hj-fxwj-49qw
- nvd: CVE-2026-53423
- https://github.com/membraneframework/membrane_mp4_plugin/security/advisories/GHSA-43hj-fxwj-49qw
- https://github.com/membraneframework/membrane_mp4_plugin/commit/56373d1ddc86968e55fbde795c14eeba24357b57
- https://cna.erlef.org/cves/CVE-2026-53423.html
- https://github.com/membraneframework/membrane_mp4_plugin
- https://osv.dev/vulnerability/EEF-CVE-2026-53423
CVE-2026-53423 · published · modified · JSON