Get real-time updates on Telegram
CVE-2026-55733: guardian from 2.0.0 (inclusive), before 2.4.1 (exclusive), 2.0.0 to before 2.4.1
CVE-2026-55733. CVSS 3.1 base score 7.5 (HIGH, NVD). EPSS 0.00476 (percentile 0.40155), scored 22-Oct-2026.
Affected technology
guardian · from 2.0.0 (inclusive), before 2.4.1 (exclusive)
ueberauth
guardian · 2.0.0 to before 2.4.1
ueberauth
guardian · b7a6128ca4d0ffb7f7df5219dd982304ff9d6802 to before 9cd268557846aa4c3ad53566c08f2c190ee5513f
ueberauth
Component: 'Elixir.Guardian.Permissions.AtomEncoding'
Function: 'Elixir.Guardian.Permissions.AtomEncoding':encode/3, 'Elixir.Guardian.Permissions.AtomEncoding':encode_value/3
File: lib/guardian/permissions/atom_encoding.ex
Attack conditions (Source advisory, CVSS 4.0): Local · No privileges required · No user interaction required
What an attacker can do
The source reports that an attacker could disrupt service under the conditions described by the source. Source advisory’s CVSS 4.0 assessment (base score 6.9/10) rates confidentiality and integrity impact as none; availability impact as high.
- CWE
- CWE-770
- CCR priority
- 30.1 /100 (P4)
- CVSS 3.1
- 7.5 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00476 · percentile 0.40155 · 2026-10-22
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-24 01:40:49.068977+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-55733.html