CVE-2026-59246: mint 0.1.0 to before 1.9.2

Affected technology

mint · 0.1.0 to before 1.9.2
elixir-mint

mint · 596ca4304504be68939c4929e0831557097962b8 to before 5779de1666344b32aefc4354184ea07f902f73ce
elixir-mint

Component: 'Elixir.Mint.HTTP2'
Function: 'Elixir.Mint.HTTP2':handle_continuation/3, 'Elixir.Mint.HTTP2':assert_header_block_within_max_size/2, in
File: lib/mint/http2.ex

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could disrupt service under the conditions described by the source. Source advisory’s CVSS 4.0 assessment (base score 6.3/10) rates confidentiality and integrity impact as none; availability impact as low.