Skip to content
OpenAdvisories

Vendor

elixir-tesla

5 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Low 2.1

    CRLF injection in Tesla.Multipart.add_content_type_param/2 allows HTTP header injection

    Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in elixir-tesla tesla allows HTTP header injection via Tesla.Multipart.add_content_type_param/2. Tesla.Multipart.add_content_type_param/2 appends calle…

  • Low 2.1
    CVE-2026-48598 Public exploit

    CRLF injection in Tesla.Multipart disposition parameters allows multipart part header injection

    Improper Encoding or Escaping of Output vulnerability in elixir-tesla tesla allows multipart part header injection via unescaped Content-Disposition parameter values. Tesla.Multipart.part_headers_for_disposition/1 interpolates each disposition parameter as #{…