VULNERABILITY INTELLIGENCE

CVE-2026-92103

CVSS score6.3 MEDIUM

EPSS probability0.22%

CISA KEVNot currently listed

Published2026-09-28

Last modified2026-09-30

Description

Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a malicious HTTP/2 server to make the client hold up to about 16 MiB per connection in frames it should reject, consuming client memory. Mint.HTTP2.Frame.decode_next/2 in lib/mint/http2/frame.ex compares a…