CVE-2026-48597: Elixir Uri Scheme Atom Exhaustioncve-2026-48597-elixir-uri-scheme-atom-exhaustion
Converting an unbounded or untrusted string (like a URI scheme) to an atom dynamically using `String.to_atom/1` can lead to an atom memory exhaustion Denial of Service (DoS) vulnerability. Erlang VM atoms are not garbage-collected, so an attacker who can provide unique inputs can exhaust the bounded atom table and crash the application. Use pattern matching