medium6.9
CVE-2026-115274
Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir
elixir-lang · elixir / elixir-lang · elixir
Find published vulnerabilities, affected versions, and available fixes.
Bring the source evidence into your coding agent to investigate what affects your project.
Explore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.