{"action":"Upgrade guardian to 2.4.1 or later.","affected":[{"fixed":"2.4.1","introduced":"0.1.0"}],"component":"guardian","cve_ids":["CVE-2026-54894"],"ecosystem":"Hex","epss":0.00476,"exploited":false,"fixed_versions":["2.4.1"],"ghsa_id":"GHSA-xqch-c77q-rgh5","id":"tcs_01M5N85BJXAYESW0Z8VZ45FRC3","modified_at":"2026-09-08T03:30:09.035963445Z","published_at":"2026-08-01T18:46:05.861Z","references":["https://osv.dev/vulnerability/EEF-CVE-2026-54894","https://github.com/ueberauth/guardian/security/advisories/GHSA-xqch-c77q-rgh5","https://cna.erlef.org/cves/CVE-2026-54894.html","https://github.com/ueberauth/guardian/commit/2952657e42e6341a67e6aaad09d8f0b40ae917cb","https://hex.pm/packages/guardian"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"EEF-CVE-2026-54894","url":"https://osv.dev/vulnerability/EEF-CVE-2026-54894"},{"source":"nvd","source_id":"CVE-2026-54894","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54894"}],"summary":"Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys"}