CVE-2026-115269 | mtrudel bandit up to 1.13.x HTTP/2 Request Body Reader stream.ex Bandit.HTTP/2.Stream.do_read_data allocation of resources

October 26, 2026 Yanac

A vulnerability classified as problematic was found in mtrudel bandit up to 1.13.x. Affected by this vulnerability is the function Bandit.HTTP2.Stream.do_read_data of the file lib/bandit/http2/stream.ex of the component HTTP2 Request Body Reader. The manipulation results in allocation of resources.

This vulnerability is identified as CVE-2026-115269. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More