Eelixir-tesla

Products

Exploited and recent CVEs

• CVE-2026-48596 Low 2.1 CRLF injection in Tesla.Multipart.add_content_type_param/2 allows HTTP header injection 0.2%
• CVE-2026-48594 High 8.2 Decompression bomb in Tesla.Middleware.DecompressResponse and Tesla.Middleware.Compression 0.5%
• CVE-2026-48595 High 8.2 Authorization header leaks to third-party origin on cross-origin redirect in Tesla.Middleware.FollowRedirects 0.5%
• CVE-2026-48597 High 8.2 Atom table exhaustion via untrusted URL scheme in Tesla.Adapter.Mint 0.3%
• CVE-2026-48598 Low 2.1 CRLF injection in Tesla.Multipart disposition parameters allows multipart part header injection 0.3%