Hex/tesla CVE-2026-48594: high 7.5, EPSS 0.46%
Tesla has decompression bomb on response body
Action: Upgrade tesla to 1.18.3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.6.0 | 1.18.3 | - |
Fixed versions
| 1.18.3 |
Sources
- osv: GHSA-mc85-72gr-vm9f
- nvd: CVE-2026-48594
- https://github.com/elixir-tesla/tesla/security/advisories/GHSA-mc85-72gr-vm9f
- https://github.com/elixir-tesla/tesla/commit/340f75b5d191dc747ef7ac6365bd002d1cd55a9d
- https://cna.erlef.org/cves/CVE-2026-48594.html
- https://github.com/elixir-tesla/tesla
- https://osv.dev/vulnerability/EEF-CVE-2026-48594
CVE-2026-48594 · published · modified · JSON