Skip to content
OpenAdvisories

Package · Hex

guardian

4 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 6.9

    guardian atom exhaustion in Guardian.Permissions.encode_permissions!/1

    Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex an…

  • Medium 6.9

    Atom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creation

    Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to…

  • Medium 6.9

    Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys

    Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binari…