Hex/mint CVE-2026-48862: high 8.2, EPSS 0.38%
mint: Unbounded streams map growth via PUSH_PROMISE without follow-up HEADERS
Action: Upgrade mint to 1.9.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.2.0 | 1.9.0 | - |
Fixed versions
| 1.9.0 |
Sources
- osv: GHSA-g586-ccqf-7x4r
- nvd: CVE-2026-48862
- https://github.com/elixir-mint/mint/security/advisories/GHSA-g586-ccqf-7x4r
- https://github.com/elixir-mint/mint/commit/70b97b6a5209fb288b0e04d8e657dda26c59de67
- https://cna.erlef.org/cves/CVE-2026-48862.html
- https://github.com/elixir-mint/mint
- https://osv.dev/vulnerability/EEF-CVE-2026-48862
CVE-2026-48862 · published · modified · JSON