CVE-2026-58226: hpax 0.1.1 to before 1.0.4

Affected technology

hpax · 0.1.1 to before 1.0.4
elixir-mint

hpax · 56db437a7e2c515e3bdd770ac7947b02cd2390d0 to before 1ba4bb2dc91e80089cf89c73970ac3ded76f17eb
elixir-mint

Component: Elixir.HPAX, Elixir.HPAX.Types
Function: 'Elixir.HPAX':decode/2, 'Elixir.HPAX.Types':decode_integer/2, 'Elixir.HPAX.Types':decode_remaining_integer/3
File: lib/hpax.ex, lib/hpax/types.ex

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could disrupt service under the conditions described by the source. Source advisory’s CVSS 4.0 assessment (base score 8.7/10) rates confidentiality and integrity impact as none; availability impact as high.