Skip to content
OpenAdvisories

Vendor

elixir-tesla

5 known vulnerabilities.

Products

tesla 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.2
    CVE-2026-48594

    Decompression bomb in Tesla.Middleware.DecompressResponse and Tesla.Middleware.Compression

    Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-tesla tesla allows a denial of service via decompression bomb in HTTP response bodies. When Tesla.Middleware.DecompressResponse or Tesla.Middleware.Compression is include…

    elixir-tesla tesla tesla Hex
  • High 8.2
    CVE-2026-48595

    Authorization header leaks to third-party origin on cross-origin redirect in Tesla.Middleware.FollowRedirects

    Improper Handling of Case Sensitivity vulnerability in elixir-tesla tesla allows credential leakage to a third-party origin on cross-origin redirects. Tesla.Middleware.FollowRedirects strips security-sensitive headers on cross-origin redirects using a case-se…

    elixir-tesla tesla tesla Hex
  • High 8.2
    CVE-2026-48597

    Atom table exhaustion via untrusted URL scheme in Tesla.Adapter.Mint

    Allocation of Resources Without Limits or Throttling vulnerability in elixir-tesla tesla allows denial of service via atom table exhaustion in Tesla.Adapter.Mint. Tesla.Adapter.Mint.open_conn/2 converts the URL scheme of every outgoing request to a BEAM atom …

    elixir-tesla tesla tesla Hex