CVE-2026-54893: Elixir Swoosh Unencoded Path Injectioncve-2026-54893-elixir-swoosh-unencoded-path-injection
Interpolating unencoded variables (such as a sender email address) directly into a URL path can lead to URL path injection. An attacker can include characters like `?`, `#`, or `/` to manipulate the request URL and execute unintended API operations. Ensure you encode path segments using `URI.encode/2` before interpolation.
