Jonatan Männchen / EEF

Remote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpc

Authorization bypass via path binding override in elixir-grpc/grpc HTTP transcoding

CRLF injection in Tesla.Multipart disposition parameters allows multipart part header injection

Atom table exhaustion via untrusted URL scheme in Tesla.Adapter.Mint

CRLF injection in Tesla.Multipart.add_content_type_param/2 allows HTTP header injection

Authorization header leaks to third-party origin on cross-origin redirect in Tesla.Middleware.FollowRedirects

Decompression bomb in Tesla.Middleware.DecompressResponse and Tesla.Middleware.Compression

Relative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypass

Actor record with password digest stored in AshAuthentication audit log entries

Stack Buffer Overflow in ei_s_print_term at Very Large Integer