Resource exhaustion in Elixir-lang Elixir
CVE-2026-49762
Uncontrolled Resource Consumption vulnerability in the Elixir standard library's Version module allows an attacker who controls a version string to cause a denial of service through CPU and memory exhaustion. The version parser converts n…
Vulnerability class: DoS (Denial of Service)
EPSS: 0.002 (4.8th percentile) — read the EPSS interpretation.
Affected products
- Elixir-lang Elixir — versions 1.5.0, 63e186aea94395897dc4964d82d250130c01ec25
Weakness classification (CWE)
References
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related)
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (patch)
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related, vendor-advisory)
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related)