CVE-2026-48594Published
Decompression bomb in Tesla.Middleware.DecompressResponse and Tesla.Middleware.Compression
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-48594 · Microsoft / collected KEV context
cve-program · CVE-2026-48594
- https://github.com/elixir-tesla/tesla/security/advisories/GHSA-mc85-72gr-vm9f
- https://cna.erlef.org/cves/CVE-2026-48594.html
- https://osv.dev/vulnerability/EEF-CVE-2026-48594
- https://github.com/elixir-tesla/tesla/commit/5bd90bb5cf0d15e375edc2a66fa322292940fce2
- https://github.com/elixir-tesla/tesla/commit/340f75b5d191dc747ef7ac6365bd002d1cd55a9d
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.