Priority MEDIUM 64
Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion.
Vulnerabilities
5 records
TI-2026-40231 CVE-2026-55733
Atom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creation
Priority MEDIUM 64
Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input.
TI-2026-39667 CVE-2026-54894
Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys
Priority MEDIUM 64
Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input.
TI-2026-40233 CVE-2026-55735
Guardian.revoke/3 acts on unverified token claims, allowing forged-token session revocation
Priority HIGH 69
Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token.
TI-2026-40360 CVE-2026-55954
Missing ID token claim validation in ueberauth_apple allows account takeover
Priority HIGH 74
Authentication Bypass by Spoofing vulnerability in ueberauth ueberauth_apple allows account takeover via unvalidated ID token claims.