Resource exhaustion in Elixir-plug Plug

CVE-2026-8468

Allocation of Resources Without Limits or Throttling vulnerability in plug_project plug allows denial of service via unbounded buffer accumulation in multipart header parsing. 'Elixir.Plug.Conn':read_part_headers/2 in lib/plug/conn.ex doe…

EPSS: 0.003 (50.5th percentile) — read the EPSS interpretation.