Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
2917
Downloads
3.3M
Verified
2917
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2026-42788: Elixir Oversized Binary Payload Exhaustioncve-2026-42788-elixir-oversized-binary-payload-exhaustion

The binary parsing logic extracts a payload of `binary-size($LEN)` before evaluating a size limit check (e.g., `when $LEN > $MAX`). This forces the Erlang VM to fully buffer up to `$LEN` bytes into memory prior to evaluating the guard and rejecting the oversized input, which can be abused for unauthenticated memory exhaustion. To prevent this, validate the f

by Provallyupdated 2026-06-23Apache-2.0
7400 direct740 via packs
downloads
68quality
All matching rules loaded.