Deserialization in Elixir-grpc Grpc
CVE-2026-48853
Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc allow unauthenticated attackers to crash the BEAM node via atom table exhaustion and, when a decoded term flows…
Vulnerability class: Insecure Deserialization
EPSS: 0.006 (44.0th percentile) — read the EPSS interpretation.
Affected products
- Elixir-grpc Grpc — versions 0.4.0, 25bcc569fe2cc4478531a6c546c923205fc751c9
Weakness classification (CWE)
References
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related, vendor-advisory)
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related)
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related)
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (patch)