elixir-mint hpax vulnerabilities

Latest elixir-mint hpax CVEs

Newest publication first

1. CVE-2026-58226 Unauthenticated denial-of-service via unbounded HPACK integer decoding in hpax

   Published 2026-07-06

   High·CVSS 8.7 EPSS 0.57%

   Inefficient Algorithmic Complexity vulnerability in elixir-mint hpax allows unauthenticated denial-of-service via unbounded HPACK integer decoding. hpax decodes HPACK variable-length integers with no upper bound on the decoded value or the number of continuation octets. 'Elixir.H...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.