CVE-2026-39806 | mtrudel bandit up to 1.11.0 TCP Connection socket.ex do_read_chunked_data infinite loop

A vulnerability, which was classified as problematic, was found in mtrudel bandit up to 1.11.0. This impacts the function do_read_chunked_data in the library lib/bandit/http1/socket.ex of the component TCP Connection Handler. Executing a manipulation can lead to infinite loop.

This vulnerability is handled as CVE-2026-39806. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.