FazBrowse GitHub Viewer | Trending | | Home

Tools: [Download Repo ZIP] [Original HTTPS Page]

Overview · elixir-mint/mint · GitHub

Security

No security policy detected

This project has not set up a SECURITY.md file yet.

Report a vulnerability

HTTP/1 chunk-size desync in Mint via Integer.parse/2 sign tolerance
GHSA-x3x7-96vm-6h2w published Jul 16, 2026 by whatyouhide

Moderate
Incomplete CONTINUATION-flood fix: zero-length HTTP/2 CONTINUATION frames bypass the byte-size cap
GHSA-8pf6-g464-h6h9 published Jul 14, 2026 by whatyouhide

Moderate
Unbounded HTTP/1 response-header and chunked-trailer accumulation allows memory-exhaustion DoS
GHSA-qrfr-wh4c-3qhw published Jul 14, 2026 by whatyouhide

High
Chunked response decoder buffers an entire chunk in memory before emitting it
GHSA-c59h-fq4p-r36r published Jul 6, 2026 by whatyouhide

High
Unbounded streams map growth via PUSH_PROMISE without follow-up HEADERS
GHSA-g586-ccqf-7x4r published Jun 2, 2026 by ericmj

High
Content-Length header accepts non-RFC "+" sign prefix
GHSA-mjqx-c6f6-7rc2 published Jun 2, 2026 by ericmj

Moderate
Unbounded CONTINUATION/HEADERS frame accumulation (CONTINUATION flood)
GHSA-2p26-p43x-fhp8 published Jun 2, 2026 by ericmj

High
CRLF injection in HTTP request line via unvalidated `method`/`target`
GHSA-2pg6-44cx-c49v published Jun 2, 2026 by ericmj

Low

Learn more about advisories related to elixir-mint/mint in the GitHub Advisory Database

Back | FazBrowse Home | New Git URL