CVE-2026-48598: Elixir Unescaped Kv Interpolationcve-2026-48598-elixir-unescaped-kv-interpolation
Constructing headers or multipart parameters by directly interpolating untrusted values into a `key="value"` string format without escaping allows CRLF and double-quote injection attacks. In contexts like Content-Disposition headers, this can lead to header smuggling, parameter forgery, or multipart body manipulation. Ensure that values are checked for `\r`,