CVE-2026-58226 | elixir-mint hpax up to 1.0.3 HPACK Integer Decoder lib/hpax/types.ex decode_remaining_integer denial of service

A vulnerability has been found in elixir-mint hpax up to 1.0.3 and classified as problematic. The impacted element is the function decode_remaining_integer of the file lib/hpax/types.ex of the component HPACK Integer Decoder. Performing a manipulation of the argument integer results in denial of service.

This vulnerability is cataloged as CVE-2026-58226. It is possible to initiate the attack remotely. There is no exploit available.