Skip to content

RadicalNotion.AI

We do not sell or share your personal information.

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Log in Create an account

Home
Patched Functions
Elixir Mint
Mint

elixir-mint/mint: Functions Patched by CVE Fixes

elixir

#412 of 500 repositories

elixir-mint/mint

Functions and files changed by CVE fixes in this repository.

Latest located fix September 28, 2026

14

CVE fixes located

Published CVEs

56

Functions patched

Distinct function sites

13

Files patched

Distinct source files

2026

Years covered

By CVE publication date

Overview

14 published CVEs have a fix traced to functions in elixir-mint/mint, the earliest published in 2026. Those fixes changed 56 distinct functions across 13 files, in 360 patch hunks.

Among the 500 repositories tracked here, elixir-mint/mint ranks #412 by the number of CVEs with a located fix.

Most patched functions

Functions in elixir-mint/mint changed by the most CVE fixes.

1decode_bodylib/mint/http1.ex4 CVEs · 5 patches2026
2format_errorlib/mint/http1.ex3 CVEs · 3 patches2026
3blocklib/mint/http2.ex2 CVEs · 3 patches2026
4decode_headerslib/xhttp/conn.ex2 CVEs · 1 patches2026
5decodelib/xhttp/conn.ex2 CVEs · 1 patches2026
6message_bodylib/xhttp/conn.ex2 CVEs · 1 patches2026
7store_headerlib/xhttp/conn.ex2 CVEs · 1 patches2026
8byte_sizelib/xhttp/conn.ex2 CVEs · 1 patches2026
9add_bodylib/xhttp/conn.ex2 CVEs · 1 patches2026
10request_donelib/xhttp/conn.ex2 CVEs · 1 patches2026
11strip_crlflib/xhttp/parse.ex2 CVEs · 1 patches2026
12transfer_encoding_headerlib/xhttp/parse.ex2 CVEs · 1 patches2026
13is_nillib/mint/http2.ex1 CVEs · 2 patches2026
14format_errorlib/mint/http2.ex1 CVEs · 2 patches2026
15header_list_size_errorlib/mint/http2.ex1 CVEs · 2 patches2026

Most patched files

Files in elixir-mint/mint changed by the most CVE fixes.

1lib/mint/http1.ex7 CVEs · 12 functions
2lib/mint/http1/parse.ex4 CVEs · 7 functions
3lib/mint/http2.ex4 CVEs · 6 functions
4lib/xhttp/conn.ex2 CVEs · 7 functions
5lib/xhttp/parse.ex2 CVEs · 2 functions
6lib/mint/http.ex2 CVEs · 0 functions
7lib/xhttp2/frame.ex1 CVEs · 12 functions
8lib/xhttp2/hpack.ex1 CVEs · 3 functions
9lib/mint/http1/request.ex1 CVEs · 2 functions
10lib/xhttp2/hpack/types.ex1 CVEs · 2 functions

Fix size

How much code a CVE fix in elixir-mint/mint changes, with backports counted once.

56

Median lines changed

Added plus removed, per CVE

29%

Fixes of 20 lines or fewer

Share of CVE fixes

14%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in elixir-mint/mint, and the functions each fix changed.

Mint HTTP/1 client applies chunked framing when chunked is not the final transfer coding, enabling response smuggling through intermediaries
CVE-2026-94194byte_size request_done decode_body
Medium · CVSS 6.3
EPSS 0.3%2026-09-28
Mint HTTP/2 client buffers oversized frames up to 16 MiB before enforcing max_frame_size
CVE-2026-92103decode_integer decode_next encode
Medium · CVSS 6.3
EPSS 0.3%2026-09-28
HPACK-indexed cookie fields in Mint HTTP/2 responses bypass max_header_list_size and exhaust client memory
CVE-2026-91043header_list_size_error is_nil block
High · CVSS 8.2
EPSS 0.4%2026-09-28
Unvalidated chunk-size line tail in Mint HTTP/1 client enables response smuggling against strict intermediaries on pooled connections
CVE-2026-82672chunk_extensions byte_size message_body
Medium · CVSS 6.3
EPSS 0.5%2026-09-19
Unbounded HTTP/1 status-line and chunk-extension buffering in Mint causes memory-exhaustion DoS
CVE-2026-82728buffer_response_line decode_body format_error
High · CVSS 8.2
EPSS 0.5%2026-09-04
Quadratic chunk-size parsing in Mint.HTTP1.Parse allows CPU-exhaustion DoS
CVE-2026-82729parse_hex_prefix is_digit
Medium · CVSS 6.3
EPSS 0.5%2026-09-04
Sign-tolerant HTTP/1 chunk-size parser in Mint enables response smuggling against strict intermediaries on pooled connections
CVE-2026-59249chunk_size decode_body is_hex_digit
Medium · CVSS 6.3
EPSS 0.5%2026-07-16
Zero-length HTTP/2 CONTINUATION frames bypass Mint's header-block byte-size cap and exhaust client memory
CVE-2026-59246assert_header_block_within_max_size
Medium · CVSS 6.3
EPSS 0.5%2026-07-14
Unbounded HTTP/1 response-header and chunked-trailer accumulation in Mint causes memory-exhaustion DoS
CVE-2026-58229decode_trailer_headers add_header_bytes format_error
High · CVSS 8.2
EPSS 0.5%2026-07-14
mint buffers an entire chunked response chunk in memory in Mint.HTTP1.decode_body/5
CVE-2026-56810add_body_to_buffer byte_size
High · CVSS 8.7
EPSS 0.5%2026-07-06
HTTP response smuggling in Mint HTTP/1 client via lenient Content-Length parsing
CVE-2026-49753only_digits
Medium · CVSS 6.3
EPSS 0.5%2026-06-02
HTTP/2 CONTINUATION flood in Mint client via unbounded header-block accumulation
CVE-2026-49754block
High · CVSS 8.2
EPSS 0.5%2026-06-02

Get an alert for each new elixir-mint/mint CVE, with the patched functions and AI-written analysis.

Monitor mint CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

AcademySoftwareFoundation/OpenImageIO14 CVEs ail-project/ail-framework14 CVEs android.googlesource.com/platform-external-libhevc14 CVEs apostrophecms/apostrophe14 CVEs assimp/assimp14 CVEs authzed/spicedb14 CVEs bigtreecms/BigTree-CMS14 CVEs canonical/lxd14 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in elixir-mint/mint.

How many CVEs have a located fix in elixir-mint/mint?: 14 published CVEs have a fix traced to functions in elixir-mint/mint, touching 56 functions across 13 files.
Which function in elixir-mint/mint has been patched by the most CVEs?: decode_body in lib/mint/http1.ex has been changed by 4 CVE fixes, from 2026 to 2026.
How large is a typical CVE fix in elixir-mint/mint?: The median fix changes 56 lines. 29% of fixes change 20 lines or fewer, and 14% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

elixir-mint/mint on GitHub (opens in a new tab)
Patched functions directory
CWE directory: the weakness types behind these fixes

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track elixir-mint/mint CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing

On this page

Overview
Most patched functions
Most patched files
Fix size
Latest CVEs
Other repositories
FAQ
References