{"id":4133,"date":"2026-09-04T18:43:01","date_gmt":"2026-09-04T10:43:01","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-48861"},"modified":"2026-09-04T18:43:01","modified_gmt":"2026-09-04T10:43:01","slug":"cve-2026-48861","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-48861","title":{"rendered":"CVE-2026-48861 &#8211; Improper Neutralization of CRLF Sequences (&#8216;CRLF Injection&#8217;) vulnerability in elixir-mint"},"content":{"rendered":"<p>Improper Neutralization of CRLF Sequences (&#8216;CRLF Injection&#8217;) vulnerability in elixir-mint Mint allows HTTP Request Splitting and HTTP Request Smuggling.<\/p>\n<p>In lib\/mint\/http1\/request.ex, the encode_request_line\/2 function splices the caller-supplied method and target arguments directly into the HTTP\/1 request line without any character validation: [method, ?s, target, &#8221; HTTP\/1.1rn&#8221;]. An application that forwards attacker-controlled input as the HTTP method or target to Mint.HTTP.request\/5 is therefore exposed to request-line CRLF injection: the attacker can terminate the request line early, inject arbitrary headers, and smuggle an entirely separate pipelined HTTP request onto the same TCP connection.<\/p>\n<p>Mint 1.7.0 introduced validate_request_target\/2, which rejects CRLF and other control characters in the target by default and closes the path\/query vector unless the caller opts out via skip_target_validation: true. The method field remains unvalidated, so the method-based injection is exploitable under the default Mint configuration on all versions.<\/p>\n<p>This issue affects mint: from 0.1.0 before 1.9.0.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Improper Neutralization of CRLF Sequences (&#8216;CRLF Injection&#8217;) vulnerability in elixir-mint Mint allows HTTP Request Splitting and HTTP Request Smuggling.<\/p>\n<p>In lib\/mint\/http1\/request.ex, the encode_reque<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-4133","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/4133","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4133"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4133"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4133"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}