Vulnerability Database - OSV

CVE-2026-56814

github.com/elixir-plug/plug

Plug: multipart :length limit is not charged for part headers, enabling... 10 Jul

Fix available
Severity - 6.9 (Medium)

EEF-CVE-2026-56814

Hex/plug
github.com/elixir-plug/plug

Plug: multipart :length limit is not charged for part headers, enabling unbounded temp-file creation (denial of service) 10 Jul

Fix available
Severity - 6.9 (Medium)