Plug: multipart :length limit is not charged for part headers, enabling unbounded temp-file creation (denial of service)

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-56814 · Microsoft / collected KEV context

cve-program · CVE-2026-56814

• https://github.com/elixir-plug/plug/security/advisories/GHSA-95qv-c9g9-rm63
• https://cna.erlef.org/cves/CVE-2026-56814.html
• https://osv.dev/vulnerability/EEF-CVE-2026-56814
• https://github.com/elixir-plug/plug/commit/c52b2f32c90bccd718202bafccb5f95594e30183
• https://github.com/elixir-plug/plug/commit/981597d3a4271ede64373c7a731702a42c500dd6
• https://github.com/elixir-plug/plug/commit/56edca2ce35fe5589cd581644d8a4493fa5f484e
• https://github.com/elixir-plug/plug/commit/0ee8afcc61466dc5f7a8f048d0632c899165b81f
• https://github.com/elixir-plug/plug/commit/cae36053350e5215a4e0ca33cd130af9c5fc6364
• https://github.com/elixir-plug/plug/commit/f7effaed811c00b5f5bf817936bfd9c5df27b7dc
• https://github.com/elixir-plug/plug/commit/df97d3f17f808a9916a7700a701fb85314559d56

No related operational record is retained in the current change model.