CVE-2026-77831: Elixir Inefficient List Append In Reduce

Appending to a list accumulator using `++` inside `Enum.reduce` causes quadratic copying (O(N^2)), which can lead to denial of service via high CPU and memory usage on large inputs. Prepend elements using `[elem | acc]` and reverse the list afterwards with `Enum.reverse/1`.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Elixir
greprules fetch cve-2026-77831-elixir-inefficient-list-append-in-reduce --engine opengrep

Description

Appending to a list accumulator using `++` inside `Enum.reduce` causes quadratic copying (O(N^2)), which can lead to denial of service via high CPU and memory usage on large inputs. Prepend elements using `[elem | acc]` and reverse the list afterwards with `Enum.reverse/1`.