Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-48596

19
FAUCET Score

Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in elixir-tesla tesla allows HTTP header injection via Tesla.Multipart.add_content_type_param/2. Tesla.Multipart.add_content_type_param/2 appends caller-supplied strings to the multipart content_type_params list without validating for CR (\r) or LF (\n) characters. Tesla.Multipart.headers/1 then joins these params verbatim with "; " to construct the outgoing Content-Type header value. A param containing \r\n splits the header line, allowing arbitrary headers to be injected into the outbound HTTP request. Any application that forwards untrusted input (such as a user-supplied charset or parameter string) into add_content_type_param/2 is affected. This issue affects tesla: from 0.8.0 before 1.18.3.

First published: Jun 2, 2026Last modified: Jun 2, 2026

Impacted Technologies

VendorProductVersion(s)CPE
Elixir-TeslaTesla
>= 6ebfdb9abe9c6f119408045b933d82462decd351, < 23601edac5d22ba9407b427967b5bdbda201aec2CNA affecteddefault unaffected
Elixir-TeslaTesla
>= 0.8.0, < 1.18.3CNA affecteddefault unaffected

CVSS Data

CVSS version used by this source: 4.0

2.1LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
LOCAL
Attack Complexity
LOW
Attack Requirements
PRESENT
Privileges Required
NONE
User Interaction
NONE
VS Confidentiality
NONE
VS Integrity
NONE
VS Availability
NONE
SS Confidentiality
NONE
SS Integrity
LOW
SS Availability
NONE
Exploit Maturity
NOT_DEFINED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.17%
Probability of exploitation in next 30 days
EPSS Percentile
6.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0017 is in the 0th percentile among its peer group of 2,096 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.6 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

erlangpatch availablevia ghsa
Product: teslaFixed in: 1.18.3

Vendor Advisories (1)

erlangGHSA-q7jx-v53g-848wlow

Tesla has CRLF injection in request `Content-Type` header via `add_content_type_param`

Jul 10, 2026

References

cna.erlef.org / cves/CVE-2026-48596.html
github.com / elixir-tesla/tesla/commit/23601edac5d22ba9407b427967b5bdbda201aec2
github.com / elixir-tesla/tesla/security/advisories/GHSA-q7jx-v53g-848w
osv.dev / vulnerability/EEF-CVE-2026-48596