CVE-2026-116078 | mtrudel bandit up to 1.14.0 HTTP/2 Request Body Reader stream.ex do_read_data allocation of resources

October 28, 2026 Yanac

A vulnerability was found in mtrudel bandit up to 1.14.0 and classified as problematic. Affected is the function do_read_data of the file lib/bandit/http2/stream.ex of the component HTTP2 Request Body Reader. The manipulation results in allocation of resources.

This vulnerability was named CVE-2026-116078. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More