Resource exhaustion in Oban-bg Oban_web

CVE-2026-48593

Uncontrolled Resource Consumption vulnerability in oban-bg oban_web ('Elixir.Oban.Web.CronExpr' modules) allows memory exhaustion via unbounded cron range expansion. An attacker with access to schedule cron jobs can submit a malicious cro…

Vulnerability class: DoS (Denial of Service)

EPSS: 0.000 (14.9th percentile) — read the EPSS interpretation.