CVE-2026-81315: Elixir Origin Host Dns Rebinding Bypasscve-2026-81315-elixir-origin-host-dns-rebinding-bypass
Comparing an Origin header's parsed host against `conn.host` provides no protection against DNS rebinding attacks because both values are attacker-controlled. Validate origins against a strict allowlist or trusted localhost hostnames instead.