Resource exhaustion in Elixir-plug Plug

CVE-2026-8468

Allocation of Resources Without Limits or Throttling vulnerability in plug_project plug allows denial of service via unbounded buffer accumulation in multipart header parsing. 'Elixir.Plug.Conn':read_part_headers/2 in lib/plug/conn.ex doe…

EPSS: 0.006 (45.7th percentile) — read the EPSS interpretation.