Priority LOW 11
Improper Neutralization of Parameter/Argument Delimiters vulnerability in elixir-plug plug allows an attacker to inject or override HTTP cookie attributes.
Vulnerabilities
2 records
TI-2026-40967 CVE-2026-56814
Plug: multipart :length limit is not charged for part headers, enabling unbounded temp-file creation (denial of service)
Priority LOW 39
Plug.Parsers.MULTIPART, the multipart request-body parser used to handle file uploads and multipart forms, does not enforce its :length budget against all consumed resources, allowing an unauthenticated remote attacker t…