{"action":"Upgrade mint to 1.9.0 or later.","affected":[{"fixed":"1.9.0","introduced":"0.1.0"}],"component":"mint","cve_ids":["CVE-2026-49754"],"ecosystem":"Hex","epss":0.00384,"exploited":false,"fixed_versions":["1.9.0"],"ghsa_id":"GHSA-2p26-p43x-fhp8","id":"tcs_01M5N857CNT4R12Z8G4KS1C25H","modified_at":"2026-09-08T03:45:05.058267146Z","published_at":"2026-06-02T14:15:14.951Z","references":["https://osv.dev/vulnerability/EEF-CVE-2026-49754","https://github.com/elixir-mint/mint/security/advisories/GHSA-2p26-p43x-fhp8","https://cna.erlef.org/cves/CVE-2026-49754.html","https://github.com/elixir-mint/mint/commit/b662d127d3028b5426c88d4c9cc7fe430491a10b","https://hex.pm/packages/mint"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"EEF-CVE-2026-49754","url":"https://osv.dev/vulnerability/EEF-CVE-2026-49754"},{"source":"nvd","source_id":"CVE-2026-49754","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49754"}],"summary":"HTTP/2 CONTINUATION flood in Mint client via unbounded header-block accumulation"}