Not analysed yet
We haven’t published our analysis of this Advisory yet. Once a person has reviewed it, this page will say what’s vulnerable, what has to be true for your app to be affected, and how to check.
Severity and exploitation
| Score | Rating | CVSS | Vector | Source |
|---|---|---|---|---|
| 8.2 | High | 4.0 | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N | CNA (EEF) |
- CISA KEV Not listed.
- EPSS 0.0035, the 28th percentile, on 6 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.
Timeline
- 31 Oct 2026, 15:25 UTC First seen by agentprime
- 31 Oct 2026, 15:25 UTC Confirmed by OSV
Sources
- GitHub Advisory Database: GHSA-h74c-q9j7-mpcm
- OSV: GHSA-h74c-q9j7-mpcm
- github.com/elixir-tesla/tesla/security/advisories/GHSA-h74c-q9j7-mpcm
- cna.erlef.org/cves/CVE-2026-48597.html
- github.com/elixir-tesla/tesla/commit/ccd0823d4ba37581a37d8f6108f9a81b263237ef
- github.com/elixir-tesla/tesla/commit/4699c3cb3e2fd6078f99f45f11cf7466aeedbf0e
- hex.pm/packages/tesla