Vulnerability in Elixir-mint Mint

CVE-2026-49753

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in elixir-mint Mint allows attacker-controlled HTTP/1 servers to desynchronise response framing on shared connections. Mint's HTTP/1 Content-Le…

Vulnerability class: HTTP Request Smuggling

EPSS: 0.000 (13.2th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References