These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
An unauthenticated attacker can forge a token to revoke a victim's session due to improper verification of cryptographic signatures in ueberauth guardian. This issue affects guardian versions from 1.0.0 before 2.4.1. The Guardian.revoke/3 function in lib/guardian.ex does not verify the signature of the supplied token before acting on its claims, allowing an unauthenticated attacker to forge a token and re [truncated]
The CVE-2026-55734 vulnerability is an Allocation of Resources Without Limits or Throttling issue in the Guardian.Permissions module of ueberauth guardian. This vulnerability allows a denial of service via BEAM atom-table exhaustion. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that uses Guardian.Permissions. For each key of the supplied map, encode_permi [truncated]
The CVE-2026-55733 vulnerability is caused by the Allocation of Resources Without Limits or Throttling in ueberauth guardian, which allows denial of service via unbounded atom creation from attacker-controlled binary input. This issue affects guardian versions from 2.0.0 before 2.4.1. Users of ueberauth guardian, especially those who use Guardian.Permissions.AtomEncoding, should be aware of this vulnerabi [truncated]
A denial-of-service vulnerability exists in ueberauth guardian versions from 0.1.0 before 2.4.1. The issue arises from the conversion of attacker-influenced binary input into atoms using String.to_atom/1, leading to potential atom table exhaustion and BEAM node crashes. This vulnerability allows an attacker to create an unbounded number of atoms, potentially leading to atom table exhaustion and BEAM node [truncated]