Vulnerability in Elixir-mint Mint
CVE-2026-48861
Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in elixir-mint Mint allows HTTP Request Splitting and HTTP Request Smuggling. In lib/mint/http1/request.ex, the encode_request_line/2 function splices the caller-s…
Vulnerability class: CRLF Injection
EPSS: 0.000 (6.2th percentile) — read the EPSS interpretation.
Affected products
- Elixir-mint Mint — versions 0.1.0, 8db1acff30b6a9433762c18b1e1f891b8c1f74f7
Weakness classification (CWE)
References
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related, vendor-advisory)
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related)
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related)
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (patch)