A vulnerability categorized as problematic has been discovered in mtrudel bandit up to 1.10.x. Affected is the function Elixir.Bandit.WebSocket.Connection in the library lib/bandit/websocket/connection.ex. Such manipulation leads to allocation of resources. This vulnerability is listed as CVE-2026-42786. The attack may be performed from remote. It is advisable to upgrade the affected component.
| Vendor | Product | Versions |
|---|---|---|
| mtrudel | bandit | 0.5.0, 8909391f486d42138c5308410bc5ea49a65f4d46 |
Updated description with new details, changed severity to HIGH, and noted that there is no available exploit.
Initial creation
