What is CVE-2026-55733?
CVE-2026-55733 is a vulnerability in the ueberauth guardian library that allows DoS via unbounded atom creation due to missing throttling in Permission scope encoding, where attacker-controlled binary input exhausts the atom table. Users should update the library to a patched version.
Azərbaycanca: CVE-2026-55733 ueberauth guardian kitabxanasında resurs məhdudiyyətsiz atom yaradılmasına yol açan zəiflikdir. İstismar nəticəsində DoS hücumu baş verə bilər, çünki encode/3 funksiyası String.to_atom/1 vasitəsilə nəzarətsiz binary girişləri Emacs VM-də atom cədvəlini doldurur. Bu zəifliyi aradan qaldırmaq üçün kitabxananı yeniləmək lazımdır.
Related CVEs
link basis: same weakness class CWE-400
FAQ2
Which library does CVE-2026-55733 affect and what is its main cause?
This vulnerability affects the ueberauth guardian library. The main cause is that the encode/3 function uses String.to_atom/1 on uncontrolled binary input, which exhausts the atom table in the Emacs VM.
How can CVE-2026-55733 be exploited and what is its impact?
Exploitation can lead to a DoS attack because the unbounded atom creation exhausts system resources.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.