{"items":[{"id":"CVE-2026-94194","published":"2026-09-28T11:15:30.684Z","updated":"2026-09-30T13:17:02.563Z","title":"Mint HTTP/1 client applies chunked framing when chunked is not the final transfer coding, enabling response smuggling through intermediaries","severity":"MEDIUM","score":6.3,"vendor":"elixir-mint","product":"mint","kev":false,"epss":0.00416,"kevAdded":null},{"id":"CVE-2026-92103","published":"2026-09-28T11:15:20.657Z","updated":"2026-09-30T15:00:38.567Z","title":"Mint HTTP/2 client buffers oversized frames up to 16 MiB before enforcing max_frame_size","severity":"MEDIUM","score":6.3,"vendor":"elixir-mint","product":"mint","kev":false,"epss":0.00328,"kevAdded":null},{"id":"CVE-2026-91043","published":"2026-09-28T11:15:09.158Z","updated":"2026-09-29T10:15:15.619Z","title":"HPACK-indexed cookie fields in Mint HTTP/2 responses bypass max_header_list_size and exhaust client memory","severity":"HIGH","score":8.2,"vendor":"elixir-mint","product":"mint","kev":false,"epss":0.00423,"kevAdded":null},{"id":"CVE-2026-82672","published":"2026-09-19T17:00:31.648Z","updated":"2026-09-21T18:30:02.604Z","title":"Unvalidated chunk-size line tail in Mint HTTP/1 client enables response smuggling against strict intermediaries on pooled connections","severity":"MEDIUM","score":6.3,"vendor":"elixir-mint","product":"mint","kev":false,"epss":0.00524,"kevAdded":null},{"id":"CVE-2026-82728","published":"2026-09-04T14:31:30.059Z","updated":"2026-09-04T19:32:44.727Z","title":"Unbounded HTTP/1 status-line and chunk-extension buffering in Mint causes memory-exhaustion DoS","severity":"HIGH","score":8.2,"vendor":"elixir-mint","product":"mint","kev":false,"epss":0.00524,"kevAdded":null},{"id":"CVE-2026-82729","published":"2026-09-04T14:31:20.562Z","updated":"2026-09-04T19:33:32.398Z","title":"Quadratic chunk-size parsing in Mint.HTTP1.Parse allows CPU-exhaustion DoS","severity":"MEDIUM","score":6.3,"vendor":"elixir-mint","product":"mint","kev":false,"epss":0.00524,"kevAdded":null},{"id":"CVE-2026-59249","published":"2026-07-16T11:39:29.939Z","updated":"2026-07-17T10:11:36.783Z","title":"Sign-tolerant HTTP/1 chunk-size parser in Mint enables response smuggling against strict intermediaries on pooled connections","severity":"MEDIUM","score":6.3,"vendor":"elixir-mint","product":"mint","kev":false,"epss":0.00524,"kevAdded":null},{"id":"CVE-2026-59246","published":"2026-07-14T08:37:04.609Z","updated":"2026-07-14T15:08:39.463Z","title":"Zero-length HTTP/2 CONTINUATION frames bypass Mint's header-block byte-size cap and exhaust client memory","severity":"MEDIUM","score":6.3,"vendor":"elixir-mint","product":"mint","kev":false,"epss":0.00502,"kevAdded":null},{"id":"CVE-2026-58229","published":"2026-07-14T08:36:54.616Z","updated":"2026-07-14T15:07:57.359Z","title":"Unbounded HTTP/1 response-header and chunked-trailer accumulation in Mint causes memory-exhaustion DoS","severity":"HIGH","score":8.2,"vendor":"elixir-mint","product":"mint","kev":false,"epss":0.00502,"kevAdded":null},{"id":"CVE-2026-56810","published":"2026-07-06T09:17:17.429Z","updated":"2026-07-07T04:32:36.390Z","title":"mint buffers an entire chunked response chunk in memory in Mint.HTTP1.decode_body/5","severity":"HIGH","score":8.7,"vendor":"elixir-mint","product":"mint","kev":false,"epss":0.00429,"kevAdded":null},{"id":"CVE-2026-58226","published":"2026-07-06T09:03:47.374Z","updated":"2026-07-06T14:04:14.632Z","title":"Unauthenticated denial-of-service via unbounded HPACK integer decoding in hpax","severity":"HIGH","score":8.7,"vendor":"elixir-mint","product":"hpax","kev":false,"epss":0.00574,"kevAdded":null},{"id":"CVE-2026-49753","published":"2026-06-02T14:15:17.078Z","updated":"2026-06-02T19:14:42.817Z","title":"HTTP response smuggling in Mint HTTP/1 client via lenient Content-Length parsing","severity":"MEDIUM","score":6.3,"vendor":"elixir-mint","product":"mint","kev":false,"epss":0.00301,"kevAdded":null},{"id":"CVE-2026-49754","published":"2026-06-02T14:15:14.951Z","updated":"2026-06-02T19:14:33.100Z","title":"HTTP/2 CONTINUATION flood in Mint client via unbounded header-block accumulation","severity":"HIGH","score":8.2,"vendor":"elixir-mint","product":"mint","kev":false,"epss":0.00384,"kevAdded":null},{"id":"CVE-2026-48862","published":"2026-06-02T14:15:10.591Z","updated":"2026-06-02T19:14:09.683Z","title":"Unbounded conn.streams growth in Mint HTTP/2 client via unenforced PUSH_PROMISE concurrency","severity":"HIGH","score":8.2,"vendor":"elixir-mint","product":"mint","kev":false,"epss":0.00384,"kevAdded":null},{"id":"CVE-2026-48861","published":"2026-06-02T14:15:09.015Z","updated":"2026-06-02T19:14:00.466Z","title":"CRLF injection in HTTP/1 request line via unvalidated method in Mint","severity":"LOW","score":2.1,"vendor":"elixir-mint","product":"mint","kev":false,"epss":0.00167,"kevAdded":null}]}