VYPR

Hex (Elixir) package

membrane_mp4_plugin

pkg:hex/membrane_mp4_plugin

Vulnerabilities (1)

  • CVE-2026-53423MedJun 11, 2026
    affected < 0.36.7fixed 0.36.7

    Allocation of Resources Without Limits or Throttling vulnerability in membraneframework membrane_mp4_plugin allows unauthenticated denial-of-service via BEAM atom table exhaustion. The MP4 box header parser converts each 4-byte box name to an atom using String.to_atom/1 without