CVE-2026-92103 | elixir-mint up to 1.10.x HTTP/2 Frame Decoder lib/mint/http2/frame.ex Mint.HTTP/2.Frame.decode_next allocation of resources

September 28, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in elixir-mint mint up to 1.10.x. This issue affects the function Mint.HTTP2.Frame.decode_next of the file lib/mint/http2/frame.ex of the component HTTP2 Frame Decoder. The manipulation leads to allocation of resources.

This vulnerability is documented as CVE-2026-92103. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More