CVE-2026-59249 | elixir-mint prior 1.9.3 HTTP1 Chunked Transfer lib/mint/http1.ex decode_body data improper synchronization

A vulnerability classified as critical has been found in elixir-mint mint prior 1.9.3. Affected by this vulnerability is the function decode_body of the file lib/mint/http1.ex of the component HTTP1 Chunked Transfer Handler. The manipulation of the argument data leads to improper synchronization.

This vulnerability is documented as CVE-2026-59249. The attack can be initiated remotely. There is not any exploit available.